From nhdevteam at gmail.com Sun Mar 8 14:25:14 2020 From: nhdevteam at gmail.com (nhmall) Date: Sun, 8 Mar 2020 14:25:14 -0700 (PDT) Subject: NetHack 3.6.6 released Message-ID: The NetHack Development Team is announcing the release of NetHack 3.6.6 on March 8, 2020. NetHack 3.6.6 is the official release of NetHack that follows NetHack 3.6.5. This release primarily corrects a security issue present in NetHack versions 3.6.1, 3.6.2, 3.6.3, 3.6.4 and 3.6.5. For details about the security issues please see https://www.nethack.org/security. You are encouraged to update to NetHack 3.6.6 as soon as possible. Here's a brief synopsis of the handful of bug fixes included in NetHack 3.6.6: * invalid status highlight color could be maliciously used to corrupt memory * formatting corpse names used internal buffers differently from formatting other objects and could potentially clobber memory * avoid divide by 0 crash if 'bogusmon' (file of bogus monster types) is empty * avoid #wizrumorcheck crash if either 'rumors.tru' or 'rumors.fal' or both were empty when makedefs built 'rumors' * avoid "'s glorkum pass harmlessly through the shade" for weaponless mon All of the fixes have been published on the public Git repository for the game. A more complete list can be found in the game's sources in doc/fixes36.6. As usual, a warning that some entries in that file may also be "spoilers". Existing saved games and bones files from 3.6.0 through to 3.6.5 should work with 3.6.6, assuming that the same build configuration options were used. The following command can be used on most platforms to help confirm the location of various files that NetHack may use: nethack --showpaths As with all releases of the game, we appreciate your feedback. Please submit any bugs using the problem report form. Also, please check the "known bugs" list before you log a problem - somebody else may have already found it. Happy NetHacking! https://www.nethack.org