NetHack 3.6.6 - Revision history

Actual-nh: /* Significant changes */ Grammar/style

2021-03-07T03:34:02Z

‎Significant changes: Grammar/style

Infinigon: add references and noversion

2021-01-20T00:21:43Z

add references and noversion

Infinigon: link to new glorkum page

2021-01-09T00:13:18Z

link to new glorkum page

Infinigon: fix typo

2021-01-08T23:47:48Z

fix typo

Umbire the Phantom: /* Significant changes */

2020-04-01T08:48:43Z

‎Significant changes

Aximili: Move security info to Security

2020-04-01T04:07:33Z

Move security info to Security

Neuros: /* Significant changes */

2020-03-10T05:11:11Z

‎Significant changes

Neuros at 05:03, 10 March 2020

2020-03-10T05:03:28Z

Neuros: Initial version

2020-03-10T05:01:25Z

Initial version

New page

{{NetHack Versions}}
'''NetHack 3.6.6''' is the 36th public release of [[NetHack]]. It was released on March 8th, 2020. This release fixes a security vulnerability that existed in versions [[3.6.1]], [[3.6.2]], [[3.6.3]], [[3.6.4]] and [[NetHack 3.6.5|3.6.5]], as well as some more minor bugs. There were no new gameplay features.<ref>https://github.com/NetHack/NetHack/blob/NetHack-3.6/doc/fixes36.6</ref>

==Availablity==

Nethack 3.6.6 is [https://nethack.org/v366/downloads.html available] from the official NetHack website.

== Significant changes ==
'''This release fixes a major security issue: a potential integer overflow when parsing the [[Options#Configuration_file|run-time configuration file]].'''<ref>https://nethack.org/security/CVE-2020-5254.html</ref> As with the security bugs in [[3.6.4]] and [[3.6.5]], this bug was reported to the [[DevTeam]] by security researcher David Mendenhall, who also explained that the bug can be used to glitch the game.<ref>https://dpmendenhall.blogspot.com/2020/03/nethack-366-or-how-to-glitch-nethack.html</ref>

There were some other changes<ref>https://nethack.org/v366/release.html</ref>:
* Formatting [[corpse]] names used internal buffers differently from formatting other objects and could potentially clobber memory
* Avoid divide by 0 crash if 'bogusmon' (file of bogus monster types) is empty
* Avoid #wizrumorcheck crash if either '[[rumors.tru]]' or '[[rumors.fal]]' or both were empty when makedefs built '[[rumors]]'
* Avoid "'s glorkum pass harmlessly through the [[shade]]" for weaponless mon

==References==

[[Category:History]]

@@ Line 7: / Line 7: @@
 == Significant changes ==
-'''This release fixes a major security issue: a potential integer overflow when parsing the [[Options#Configuration_file|run-time configuration file]].'''<ref>https://nethack.org/security/CVE-2020-5254.html</ref> As with the security bugs fixed in [[3.6.4]] and [[NetHack 3.6.5|3.6.5]], this bug was reported to the [[DevTeam]] by security researcher David Mendenhall, who also explained that the bug can be used to glitch the game.<ref>https://dpmendenhall.blogspot.com/2020/03/nethack-366-or-how-to-glitch-nethack.html</ref>
+'''This release fixes [[Security#CVE-2020-5254|CVE-2020-5254]]'''<ref>https://nethack.org/security/CVE-2020-5254.html</ref> As with the security bugs fixed in [[3.6.4]] and [[NetHack 3.6.5|3.6.5]], this bug was reported to the [[DevTeam]] by security researcher David Mendenhall, who also explained that the bug can be used to glitch the game.<ref>https://dpmendenhall.blogspot.com/2020/03/nethack-366-or-how-to-glitch-nethack.html</ref>
 There were some other changes<ref>https://nethack.org/v366/release.html</ref>:

@@ Line 7: / Line 7: @@
 == Significant changes ==
-'''This release fixes a major security issue: a potential integer overflow when parsing the [[Options#Configuration_file|run-time configuration file]].'''<ref>https://nethack.org/security/CVE-2020-5254.html</ref> As with the security bugs in [[3.6.4]] and [[NetHack 3.6.5|3.6.5]], this bug was reported to the [[DevTeam]] by security researcher David Mendenhall, who also explained that the bug can be used to glitch the game.<ref>https://dpmendenhall.blogspot.com/2020/03/nethack-366-or-how-to-glitch-nethack.html</ref>
+'''This release fixes a major security issue: a potential integer overflow when parsing the [[Options#Configuration_file|run-time configuration file]].'''<ref>https://nethack.org/security/CVE-2020-5254.html</ref> As with the security bugs fixed in [[3.6.4]] and [[NetHack 3.6.5|3.6.5]], this bug was reported to the [[DevTeam]] by security researcher David Mendenhall, who also explained that the bug can be used to glitch the game.<ref>https://dpmendenhall.blogspot.com/2020/03/nethack-366-or-how-to-glitch-nethack.html</ref>
 There were some other changes<ref>https://nethack.org/v366/release.html</ref>:

@@ Line 9: / Line 9: @@
 '''This release fixes [[Security#CVE-2020-5254|CVE-2020-5254]].'''<ref>https://nethack.org/security/CVE-2020-5254.html</ref> As with the security bugs fixed in [[3.6.4]] and [[NetHack 3.6.5|3.6.5]], this bug was reported to the [[DevTeam]] by security researcher David Mendenhall, who also explained that the bug can be used to glitch the game.<ref>https://dpmendenhall.blogspot.com/2020/03/nethack-366-or-how-to-glitch-nethack.html</ref>
-There were some other changes<ref>https://nethack.org/v366/release.html</ref>:
+There were some other fixes<ref>https://nethack.org/v366/release.html</ref>:
 * Formatting [[corpse]] names used internal buffers differently from formatting other objects and could potentially clobber memory
 * Avoid divide by 0 crash if 'bogusmon' (file of bogus monster types) is empty

@@ Line 4: / Line 4: @@
 ==Availability==
-Nethack 3.6.6 is [https://nethack.org/v366/downloads.html available] from the official NetHack website.
+NetHack 3.6.6 is [https://nethack.org/v366/downloads.html available] from the official NetHack website.
 == Significant changes ==
@@ Line 16: / Line 16: @@
 ==References==
 [[Category:History]]

@@ Line 13: / Line 13: @@
 * Avoid divide by 0 crash if 'bogusmon' (file of bogus monster types) is empty
 * Avoid #wizrumorcheck crash if either '[[rumors.tru]]' or '[[rumors.fal]]' or both were empty when makedefs built '[[rumors]]'
-* Avoid "'s glorkum pass harmlessly through the [[shade]]" for weaponless monsters
+* Avoid "'s [[glorkum]] pass harmlessly through the [[shade]]" for weaponless monsters
 ==References==
 [[Category:History]]

@@ Line 2: / Line 2: @@
 '''NetHack 3.6.6''' is the 36th public release of [[NetHack]]. It was released on March 8th, 2020. This release fixes a security vulnerability that existed in versions [[3.6.1]], [[3.6.2]], [[3.6.3]], [[3.6.4]] and [[NetHack 3.6.5|3.6.5]], as well as some more minor bugs. There were no new gameplay features.<ref>https://github.com/NetHack/NetHack/blob/NetHack-3.6/doc/fixes36.6</ref>
-==Availablity==
+==Availability==
 Nethack 3.6.6 is [https://nethack.org/v366/downloads.html available] from the official NetHack website.