UnrealIRCd 4.0.3 released

News about the UnrealIRCd project, including release announcements
Post Reply
Syzop
UnrealIRCd head coder
Posts: 2112
Joined: Sat Mar 06, 2004 8:57 pm
Location: .nl
Contact:

UnrealIRCd 4.0.3 released

Post by Syzop »

On UnrealIRCd 4.0.x an IRCOp could crash a server via the RPING command. This command has now been removed since it's rarely used anyway. Note that regular users cannot trigger this crash. We classify this issue as low impact because IRC Operators usually have the power to kill many if not all users on a server. Many IRCOps can shutdown or make the server unusable for users through other commands or means.

If you use UnrealIRCd 4.0.x and want to fix the RPING crash but don't want to upgrade to 4.0.3 yet then you can unload the module by editing conf/modules.default.conf. You should remove this line:
loadmodule "m_rping";
Then, rehash the IRCd (no restart needed).
If you now type '/RPING' or '/QUOTE RPING' on IRC you should see 'RPING Unknown command'.

There are more changes in this 4.0.3 release. On Windows we changed the build process and are now using LibreSSL. Two crash bugs related to invalid link blocks were fixed. For more details see below.

Major issues fixed
  • Crash on RPING command (IRCOp-only!)
  • Crash on Windows on failed outgoing server connect
  • Crash if you had a link { } block with invalid syntax
Minor issues fixed
  • Windows: Remote includes did not support https
Other
  • Windows version compiled with Visual Studio 2012 rather than a mix
  • Windows version now using LibreSSL
  • Crash reporter produces more useful reports (important for us)
  • PCRE2 Regex engine upgraded to 10.21
Post Reply