0.6.3 released - security fix (Page 1 of 2)

**heinrich5991** · 2014-11-20 01:39:50

heinrich5991
Moderator / Donor
Offline

Topic: 0.6.3 released - security fix

As a result of a recently reported security vulnerability in the server, this release contains little updates. In particular it's only the following changes:

Bugfixes:

Fix the above-mentioned security vulnerability (Memory reads, Segmentation Fault) in all 0.6.x servers.
Fix server crash in the console code.
Fix master server lookup for servers.
Fix scripts/make_release.py script.
Fix client crash when opening a map with an invalid version.

As a result, server owners are urged to upgrade ASAP, you're running an exploitable server right now.

Client updates however, are not as urgent as the server updates, because the only fix is an editor crash.

Download Teeworlds 0.6.3!

**heinrich5991** · 2014-11-20 01:47:19

heinrich5991
Moderator / Donor
Offline

Re: 0.6.3 released - security fix

For people not having access to the source code of the mod they're running, I've prepared a script that should be able to patch the executables, removing the vulnerability.

View script.
Download Python 3 script.
Usage: python fix.py <server executable>. Script doesn't work in-place, it creates a copy of the executable that it patches.

**Zgokee** · 2014-11-20 02:09:00

Zgokee
Member
Offline

Re: 0.6.3 released - security fix

Do not need the script myself, but a huge thank you for setting that up heinrich5991.

**HMH** · 2014-11-20 17:30:57

HMH
Member
Offline

Re: 0.6.3 released - security fix

Where is the corresponding git repository yikes ?

Luck is allowed

**Neox** · 2014-11-20 18:00:25

Neox
Donor
Offline

Re: 0.6.3 released - security fix

Yeah where is the corresponding git repository please ?

while(!Success())
TryAgain();
Try until you succeed.

**floyd** · 2014-11-20 19:51:41

floyd
Member
Offline

Re: 0.6.3 released - security fix

Thanks for the update, what about putting it too on the index page of the website? I mean the direct download link.

Need a tool to manage your servers? teeman
<3

**Mr_Anderson** · 2014-11-20 20:16:46

Mr_Anderson
New member
Offline

Re: 0.6.3 released - security fix

Does it also patch linux versions?

**[pieLover]** · 2014-11-20 20:44:44

[pieLover]
Member
Offline

Re: 0.6.3 released - security fix

Mr_Anderson wrote:

Does it also patch linux versions?

Yes, as far as I know.

EDIT: Yes, it does. It names it to have a .exe as the extension but that's it.

Clan: Riot (I'm one of three leaders: Mile, Deku, pie)
Host teeworlds maps on a fng/ctf/dm/ddrace server for testing:http://riotproductions.tk/teewo/ broken-need reinstall nginx http://riotproductions.tk/bounce?whatEven, Teeworlds NA Discord chat

**lolo** · 2014-11-20 22:26:46

lolo
Member
Offline

Re: 0.6.3 released - security fix

Post deleted for privacy reasons.

**Mr_Anderson** · 2014-11-20 23:16:00

Mr_Anderson
New member
Offline

Re: 0.6.3 released - security fix

pielover88888 wrote:

EDIT: Yes, it does. It names it to have a .exe as the extension but that's it.

Yes. I just removed ".exe" smile

Really nice work!

**heinrich5991** · 2014-11-21 02:19:08

heinrich5991
Moderator / Donor
Offline

Re: 0.6.3 released - security fix

HMH wrote:

Where is the corresponding git repository ?

Neox76 wrote:

Yeah where is the corresponding git repository please ?

Currently you can view it at my fork (branch 0.6 of heinrich5991/teeworlds), however it will be pulled into teeworlds/teeworlds soon, I just need to coordinate with m!nus.
(This was a hasty release, that's why not everything was prepared, we tried to do the best in the least time smile )

**heinrich5991** · 2014-11-21 02:19:52

heinrich5991
Moderator / Donor
Offline

Re: 0.6.3 released - security fix

pielover88888 wrote:

Mr_Anderson wrote:
Does it also patch linux versions?
Yes, as far as I know.
EDIT: Yes, it does. It names it to have a .exe as the extension but that's it.

Yes, I was just too lazy to do different renamings for Windows/Linux.

**heinrich5991** · 2014-11-21 20:00:43

heinrich5991
Moderator / Donor
Offline

Re: 0.6.3 released - security fix

floyd wrote:

Thanks for the update, what about putting it too on the index page of the website? I mean the direct download link.

Thanks, I now understand what you wanted to say. Download link on the index page fixed.

**[SN] Snoop!** · 2014-11-23 10:06:36

[SN] Snoop!
Member
Offline

Re: 0.6.3 released - security fix

Where is Ukrainian language? Are you hate us?

E' un Sole Nero!

**lamefun** · 2014-11-23 13:11:44

lamefun
Member
Offline

Re: 0.6.3 released - security fix

"Memory reads, Segmentation Fault" - ah, C++! "Free" language, "independent" of PROprietary companies!

**Dune** · 2014-11-23 19:14:17

Dune
Moderator
Offline

Re: 0.6.3 released - security fix

lamefun wrote:

"Memory reads, Segmentation Fault" - ah, C++! "Free" language, "independent" of PROprietary companies!

This is not the appropriate place for this kind of discussion. Stop with this.

Not Luck, Just Magic.

**heinrich5991** · 2014-11-24 21:24:48

heinrich5991
Moderator / Donor
Offline

Re: 0.6.3 released - security fix

Snoooop wrote:

Where is Ukrainian language? Are you hate us?

We tried to remove languages that are far from completion.

**HMH** · 2014-11-28 23:18:30

HMH
Member
Offline

Re: 0.6.3 released - security fix

I compiled the macversion, sdl and feetype pathes should be correctly set to the Frameworks folder within the appbundle already.

Here it is: teeworlds-0.6.3-osx.dmg

Luck is allowed

**dremy** · 2014-12-14 14:20:29

dremy
Member
Offline

Re: 0.6.3 released - security fix

hello guys i was like inactive for years now. Is 1.7 under development or nu? sad

If you want a perfect map for your own server you can PM me to make you one ^^

Please also try play nodes you may download it here!. And as always.Have a nice day

**[pieLover]** · 2014-12-14 23:43:20

[pieLover]
Member
Offline

Re: 0.6.3 released - security fix

Wait, 1.7? You mean 0.7, right?
Really sick of everyone calling 0.6 "1.6", and 0.7 "1.7" hmm

Clan: Riot (I'm one of three leaders: Mile, Deku, pie)
Host teeworlds maps on a fng/ctf/dm/ddrace server for testing:http://riotproductions.tk/teewo/ broken-need reinstall nginx http://riotproductions.tk/bounce?whatEven, Teeworlds NA Discord chat

**2gethR** · 2014-12-15 09:17:24

2gethR
Member
Offline

Re: 0.6.3 released - security fix

pielover88888 wrote:

Really sick of everyone calling 0.6 "1.6", and 0.7 "1.7"

Dude there is no point in calling it 0.x anyways because that would indicate that Teeworlds is still in the pre-alpha. And since it is "nearly perfect" (yeah, sure, stfu devs) the term 1.x would be more accurate. Also, everyone knows what is meant by 1.7, there should be nothing bothering anyone.
As for you dremy; yes, the development is still ongoing, though very slowly. We kind of have to wait another decade for its release, as there is an average of one line of code added per day (and even this estimate might be way too high).

Move along, nothing to see here, really.

**Dune** · 2014-12-15 12:21:35

Dune
Moderator
Offline

Re: 0.6.3 released - security fix

As usual, those who complain are those who do nothing.

Not Luck, Just Magic.

**2gethR** · 2014-12-15 14:52:18

2gethR
Member
Offline

Re: 0.6.3 released - security fix

That surely is the truth. No denying that. Though is it our task, the consumers, to do anything concerning the development? Furthermore you cannot ask anyone, who does not have the slightest idea of what he can do to help, or knows how to contribute code of any sorts, to do anything. I am not upset, I really am not. I would certainly like to help and contribute things to this community. But I simply do not know how or what or where. I contributed various things such as maps and tutorials. These few posts are obviously nothing compared to the amount of posts other members made. But I do what I can, and I can only do this much.

Move along, nothing to see here, really.

**HMH** · 2014-12-15 19:14:54

HMH
Member
Offline

Re: 0.6.3 released - security fix

HMH wrote:

I compiled the macversion, sdl and feetype pathes should be correctly set to the Frameworks folder within the appbundle already.
Here it is: teeworlds-0.6.3-osx.dmg

And even if you try contributing something...

...http://downloads.teeworlds.com/teeworlds-0.6.3-osx.dmg

Luck is allowed

**heinrich5991** · 2014-12-17 02:18:48

heinrich5991
Moderator / Donor
Offline

Re: 0.6.3 released - security fix

HMH wrote:

HMH wrote:
I compiled the macversion, sdl and feetype pathes should be correctly set to the Frameworks folder within the appbundle already.
Here it is: teeworlds-0.6.3-osx.dmg

And even if you try contributing something...
...http://downloads.teeworlds.com/teeworlds-0.6.3-osx.dmg

Can someone with a Mac try out this build? We unfortunately don't have someone that can test this on the team. hmm

0.6.3 released - security fix (Page 1 of 2)

Posts: 1 to 25 of 36

1 Topic by heinrich5991 2014-11-20 01:39:50

Topic: 0.6.3 released - security fix

2 Reply by heinrich5991 2014-11-20 01:47:19

Re: 0.6.3 released - security fix

3 Reply by Zgokee 2014-11-20 02:09:00

Re: 0.6.3 released - security fix

4 Reply by HMH 2014-11-20 17:30:57

Re: 0.6.3 released - security fix

5 Reply by Neox 2014-11-20 18:00:25

Re: 0.6.3 released - security fix

6 Reply by floyd 2014-11-20 19:51:41

Re: 0.6.3 released - security fix

7 Reply by Mr_Anderson 2014-11-20 20:16:46

Re: 0.6.3 released - security fix

8 Reply by [pieLover] 2014-11-20 20:44:44 (edited by [pieLover] 2014-11-20 22:34:02)

Re: 0.6.3 released - security fix

9 Reply by lolo 2014-11-20 22:26:46 (edited by lolo 2020-09-15 13:40:32)

Re: 0.6.3 released - security fix

10 Reply by Mr_Anderson 2014-11-20 23:16:00 (edited by Mr_Anderson 2014-11-20 23:16:32)

Re: 0.6.3 released - security fix

11 Reply by heinrich5991 2014-11-21 02:19:08

Re: 0.6.3 released - security fix

12 Reply by heinrich5991 2014-11-21 02:19:52

Re: 0.6.3 released - security fix

13 Reply by heinrich5991 2014-11-21 20:00:43

Re: 0.6.3 released - security fix

14 Reply by [SN] Snoop! 2014-11-23 10:06:36

Re: 0.6.3 released - security fix

15 Reply by lamefun 2014-11-23 13:11:44

Re: 0.6.3 released - security fix

16 Reply by Dune 2014-11-23 19:14:17

Re: 0.6.3 released - security fix

17 Reply by heinrich5991 2014-11-24 21:24:48

Re: 0.6.3 released - security fix

18 Reply by HMH 2014-11-28 23:18:30

Re: 0.6.3 released - security fix

19 Reply by dremy 2014-12-14 14:20:29

Re: 0.6.3 released - security fix

20 Reply by [pieLover] 2014-12-14 23:43:20

Re: 0.6.3 released - security fix

21 Reply by 2gethR 2014-12-15 09:17:24

Re: 0.6.3 released - security fix

22 Reply by Dune 2014-12-15 12:21:35

Re: 0.6.3 released - security fix

23 Reply by 2gethR 2014-12-15 14:52:18

Re: 0.6.3 released - security fix

24 Reply by HMH 2014-12-15 19:14:54

Re: 0.6.3 released - security fix

25 Reply by heinrich5991 2014-12-17 02:18:48

Re: 0.6.3 released - security fix

Posts: 1 to 25 of 36