A bug has been found in versions through 4.2.2 of Services for IRC Networks which allows any IRC user to crash the program. The channel service's SET SUCCESSOR command does not properly handle the case of no parameters, and generates a segmentation fault attempting to access address zero. This bug is believed to be present in all versions since the SET SUCCESSOR command was introduced (in version 4.1.0). A new version, 4.2.3, has been released which fixes this bug. Users of prior versions of Services should upgrade immediately. Services updates are always announced on the Services mailing list; see http://achurch.dragonfire.net/services/about.html for information on subscribing to the list. --Andy Church achurchat_private http://achurch.dragonfire.net/
This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:43:39 PDT