FrozenSand / UrbanTerror4

Official bug tracker for the game Urban Terror 4.x - www.urbanterror.info
77 stars 18 forks source link

Ioquake3 critical security vulnerability #400

Closed Fixer-007 closed 7 years ago

Fixer-007 commented 7 years ago

I was AFK from Urt gaming, but need to post this: https://ioquake3.org/2017/03/13/important-security-update-please-update-ioquake3-immediately/

IIRC you can play UrT with ioquake, anyone doing so should update. If it is not relevant today - close this issue.

Barbatos commented 7 years ago

We patched this exploit in Quake3-UrT in September, 2014: https://github.com/Barbatos/ioq3-for-UrbanTerror-4/commit/73cdcba81fb496c7362e658af7ebf690483c8ed5 https://github.com/Barbatos/ioq3-for-UrbanTerror-4/commit/b8209b25c11b6e7fbd2bb27dc6f6cd4a3e176d69

People who play UrT with the vanilla ioq3 client are affected though. Thank you for letting them know about this update! I'll relay it on social media.