Eggdrop 1.6.19 Released
8 May 2008
It took almost 2 years for a new release, and even then it consists mostly of bugfixes of which one fixes a serious issue.

Version 1.6.19 of the popular IRC bot Eggdrop fixes a buffer overflow issue in the server module. It is exploitable by a malicious server. As long as the bot connects to a reputable server it should be OK.

IRC-Junkie tried to contact Guppy with a few questions but has received no reply so far, partly explaining the delay in reporting this new release.

A list of all updates according to the updates.txt file:

- Update the recommended TCL version to 8.5
- Updated Copyright dates
- added [sL] and thommey to the AUTHORS file
- load blowfish by default
- added a TCL to handle the PONG : junk on some EFnet servers
- add a simple TCL to handle the PASS junk on some Undernet servers
- add support for chanmode +T
- CTCP parsing was broken by the servmsg.c buffer overflow patch
- Fixed a couple of typos in the FEATURES file.
- Fixed two buffer overflows in servmsg.c (CVE-2007-2807).
- Fixed compatibility problems with certain time_t implementations.
- Complete raw traffic wasn't getting logged in some cases; only the raw command itself was. Fixed.

You think you have something to add to this article? You can do so by using this form below! Your comment will be added on the bottom of this page.

nick:	Tripcode: nick#password allowed Tripcodes are shown as nick!tripcode
yellow text:
comment:	BBCode: [b]text[/b], [i]text[/i], [u]text[/u], [url=http://domain]text[/url], [quote]text[/quote] Please check your text before submitting, there is no edit function afterwards.