[IRCServices] Services 5.1.3 released

Andrew Church achurch at achurch.org
Tue Oct 23 13:17:13 PDT 2007


     Services 5.1.3 has been released, and can be downloaded from:

http://www.ircservices.za.net/download/   (Japan)
ftp://ftp.esper.net/ircservices/          (Western USA)

7a91c510d95401d02fbc8947cf8ee313  ircservices-5.1.3.tar.gz
53b1ca24a490593a58e3d013119530e8  ircservices-5.1.3.diff.gz
45e95019fcac8a3b432039ad1485015a  ircservices-5.1.3-1.i386.rpm
72039583ec8a0b23f9aaed8e75843994  ircservices_5.1.3-1_i386.deb

The mirrors should have it shortly.

     Since the release of 5.1.2, I've performed a full review of the
Services code base for similar problems, and corrected three bugs with
the potential to crash Services.  In decreasing order of severity, they
are:

    - A possible crash that can be triggered by any user if the
      CSEnableRegister configuration option is not set (i.e., channel
      registration is disabled).

    - A certain crash that can be triggered by an IRC operator with
      Services operator privileges.

    - A possible crash that can be unintentionally triggered by an IRC
      operator with Services administrator privileges when using the
      NickServ SETAUTH command.

     For typical configurations, none of these are as severe as the bug
that was fixed in 5.1.2; nonetheless, I recommend upgrading to 5.1.3 at
your earliest convenience.  Once again, I offer my sincere apologies for
any disruption these bugs may have caused.

Changes in version 5.1.3
------------------------
2007/10/23	Reviewed the Services codebase, fixing several more bugs
		    that could lead to crashes in certain circumstances.

  --Andrew Church
    achurch at achurch.org
    http://achurch.org/