NetHack 3.6.5 - Revision history

Infinigon: Add noversion and references

2021-01-20T00:22:04Z

Add noversion and references

Aximili: Move security info to Security

2020-04-01T04:05:44Z

Move security info to Security

Neuros: /* Security */

2020-03-10T04:40:38Z

‎Security

Ardub23 at 01:31, 31 January 2020

2020-01-31T01:31:08Z

Aximili: Created page with "{{NetHack Versions}} '''NetHack 3.6.5''' is the 35th public release of NetHack. It was released on 27th January 2020. This release fixes several security exploits that ex..."

2020-01-29T04:15:54Z

Created page with "{{NetHack Versions}} '''NetHack 3.6.5''' is the 35th public release of NetHack. It was released on 27th January 2020. This release fixes several security exploits that ex..."

New page

{{NetHack Versions}}

'''NetHack 3.6.5''' is the 35th public release of [[NetHack]]. It was released on 27th January 2020. This release fixes several security exploits that existed in versions [[3.6.0]], [[3.6.1]], [[3.6.2]], [[3.6.3]] and [[3.6.4]], as well as some more minor bugs. There were no new gameplay features<ref>https://github.com/NetHack/NetHack/blob/NetHack-3.6/doc/fixes36.5</ref>.

== Availability ==

NetHack 3.6.5 is [https://nethack.org/v365/downloads.html available] from the official NetHack website.

== Significant Changes ==

=== Security ===

These security vulnerabilities were fixed:

* CVE-2020-5209<ref>https://nethack.org/security/CVE-2020-5209.html</ref>: command line parsing of options starting with -de and -i is subject to a [https://en.wikipedia.org/wiki/Buffer_overflow buffer overflow ]
* CVE-2020-5210<ref>https://nethack.org/security/CVE-2020-5210.html</ref>: command line -w option parsing is subject to a buffer overflow
* CVE-2020-5211<ref>https://nethack.org/security/CVE-2020-5211.html</ref>: [[Options#AUTOCOMPLETE|AUTOCOMPLETE]] configuration file option is subject to a buffer overflow
* CVE-2020-5212<ref>https://nethack.org/security/CVE-2020-5212.html</ref>: [[Menucolors|MENUCOLOR]] configuration file option is subject to a buffer overflow
* CVE-2020-5213<ref>https://nethack.org/security/CVE-2020-5213.html</ref>: [[Options#SYMBOL|SYMBOL]] configuration file option is subject to a buffer overflow
* CVE-2020-5214<ref>https://nethack.org/security/CVE-2020-5214.html</ref>: error recovery after syntax error in configuration file is subject to a buffer overflow

These were all reported to the DevTeam by security researcher David Mendenhall.

=== Bug fixes ===

Other bug fixes include<ref>https://github.com/NetHack/NetHack/blob/NetHack-3.6/doc/fixes36.5</ref>:

* fix accessing mons[-1] when trying to [[demon gating|gate]] in a non-valid demon
* fix accessing mons[-1] when monster figures out if a [[tin]] cures [[stoning]]
* have string_for_opt() return empty_optstr on failure
* ensure existing callers of string_for_opt() check return value before using it
* use vsnprintf instead of vsprintf in pline.c where possible
* [[Windows]]: includes a fix from a 3.6.4 post-release update where OPTIONS=map_mode:fit_to_screen could cause a game start failure
* [[Windows]]: users with C-locale unmappable names could get game start failure

== References ==

[[Category:History]]

← Older revision		Revision as of 00:22, 20 January 2021
Line 27:		Line 27:

	== References ==		== References ==
		+	<references/>

		+	{{noversion}}
	[[Category:History]]		[[Category:History]]

@@ Line 20: / Line 20: @@
 * CVE-2020-5214: error recovery after syntax error in configuration file is subject to a buffer overflow<ref>https://nethack.org/security/CVE-2020-5214.html</ref>
-These were all reported to the DevTeam by security researcher David Mendenhall.
+These were all reported to the DevTeam by security researcher David Mendenhall.<ref>https://dpmendenhall.blogspot.com/2020/03/nethack-365.html</ref>
 === Bug fixes ===

@@ Line 10: / Line 10: @@
 === Security ===
-These security vulnerabilities were fixed:
+Six major security exploits were fixed. They were all buffer overflows that could be triggered by parsing options in configuration options or the command line.
 === Bug fixes ===

@@ Line 1: / Line 1: @@
 {{NetHack Versions}}
-'''NetHack 3.6.5''' is the 35th public release of [[NetHack]]. It was released on 27th January 2020. This release fixes several security exploits that existed in versions [[3.6.0]], [[3.6.1]], [[3.6.2]], [[3.6.3]] and [[3.6.4]], as well as some more minor bugs. There were no new gameplay features<ref>https://github.com/NetHack/NetHack/blob/NetHack-3.6/doc/fixes36.5</ref>.
+'''NetHack 3.6.5''' is the 35th public release of [[NetHack]]. It was released on 27th January 2020. This release fixes several security exploits that existed in versions [[3.6.0]], [[3.6.1]], [[3.6.2]], [[3.6.3]] and [[3.6.4]], as well as some more minor bugs. There were no new gameplay features.<ref>https://github.com/NetHack/NetHack/blob/NetHack-3.6/doc/fixes36.5</ref>
 == Availability ==
@@ Line 7: / Line 7: @@
 NetHack 3.6.5 is [https://nethack.org/v365/downloads.html available] from the official NetHack website.
-== Significant Changes ==
+== Significant changes ==
 === Security ===
@@ Line 13: / Line 13: @@
 These security vulnerabilities were fixed:
-* CVE-2020-5209<ref>https://nethack.org/security/CVE-2020-5209.html</ref>: command line parsing of options starting with -de and -i is subject to a [https://en.wikipedia.org/wiki/Buffer_overflow buffer overflow ]
+* CVE-2020-5209: command line parsing of options starting with -de and -i is subject to a [[wikipedia:buffer overflow|buffer overflow]]<ref>https://nethack.org/security/CVE-2020-5209.html</ref>
-* CVE-2020-5210<ref>https://nethack.org/security/CVE-2020-5210.html</ref>: command line -w option parsing is subject to a buffer overflow
+* CVE-2020-5210: command line -w option parsing is subject to a buffer overflow<ref>https://nethack.org/security/CVE-2020-5210.html</ref>
-* CVE-2020-5211<ref>https://nethack.org/security/CVE-2020-5211.html</ref>: [[Options#AUTOCOMPLETE|AUTOCOMPLETE]] configuration file option is subject to a buffer overflow
+* CVE-2020-5211: [[Options#AUTOCOMPLETE|AUTOCOMPLETE]] configuration file option is subject to a buffer overflow<ref>https://nethack.org/security/CVE-2020-5211.html</ref>
-* CVE-2020-5212<ref>https://nethack.org/security/CVE-2020-5212.html</ref>: [[Menucolors|MENUCOLOR]] configuration file option is subject to a buffer overflow
+* CVE-2020-5212: [[Menucolors|MENUCOLOR]] configuration file option is subject to a buffer overflow<ref>https://nethack.org/security/CVE-2020-5212.html</ref>
-* CVE-2020-5213<ref>https://nethack.org/security/CVE-2020-5213.html</ref>: [[Options#SYMBOL|SYMBOL]] configuration file option is subject to a buffer overflow
+* CVE-2020-5213: [[Options#SYMBOL|SYMBOL]] configuration file option is subject to a buffer overflow<ref>https://nethack.org/security/CVE-2020-5213.html</ref>
-* CVE-2020-5214<ref>https://nethack.org/security/CVE-2020-5214.html</ref>: error recovery after syntax error in configuration file is subject to a buffer overflow
+* CVE-2020-5214: error recovery after syntax error in configuration file is subject to a buffer overflow<ref>https://nethack.org/security/CVE-2020-5214.html</ref>
 These were all reported to the DevTeam by security researcher David Mendenhall.
@@ Line 24: / Line 24: @@
 === Bug fixes ===
-Other bug fixes include<ref>https://github.com/NetHack/NetHack/blob/NetHack-3.6/doc/fixes36.5</ref>:
+Other bug fixes include:<ref>https://github.com/NetHack/NetHack/blob/NetHack-3.6/doc/fixes36.5</ref>
 * fix accessing mons[-1] when trying to [[demon gating|gate]] in a non-valid demon