From nhdevteam at gmail.com Mon Jan 27 21:33:34 2020 From: nhdevteam at gmail.com (nhdevteam) Date: Mon, 27 Jan 2020 21:33:34 -0800 (PST) Subject: NetHack 3.6.5 released Message-ID: The NetHack DevTeam is announcing the release of NetHack 3.6.5 on January 27, 2020. NetHack 3.6.5 is the official release of NetHack that follows NetHack 3.6.4. This release primarily corrects security issues present in NetHack versions 3.6.0, 3.6.1, 3.6.2, 3.6.3 and 3.6.4. For details about the security issues please see https://www.nethack.org/security. You are encouraged to update to NetHack 3.6.5 as soon as possible. Here's a brief synopsis of the handful of bug fixes included in NetHack 3.6.5: - fix accessing mons[-1] when trying to gate in a non-valid demon - fix accessing mons[-1] when monster figures out if a tin cures stoning - have string_for_opt() return empty_optstr on failure - ensure existing callers of string_for_opt() check return value before using it - fix potential buffer overflow in add_menu_coloring() - fix potential buffer overflow in sym_val() - fix potential buffer overflow in pline(), raw_printf(), and config_error_add() - fix potential buffer overflow in choose_windows() - use vsnprintf instead of vsprintf in pline.c where possible - Windows: includes a fix from a 3.6.4 post-release update where OPTIONS=map_mode:fit_to_screen could cause a game start failure - Windows: users with C-locale unmappable names could get game start failure All of the fixes have been incrementally published on the public Git repository for the game. A more complete list can be found in the game's sources in doc/fixes36.5. As usual, a warning that some entries in that file may also be "spoilers". Existing saved games and bones files from 3.6.0 through to 3.6.4 should work with 3.6.5, assuming that the same build configuration options were used. The following command can be used on most platforms to help confirm the location of various files that NetHack may use: nethack --showpaths As with all releases of the game, we appreciate your feedback. Please submit any bugs using the problem report form. Also, please check the "known bugs" list before you log a problem - somebody else may have already found it. Happy NetHacking!