Bug 43703 – hlds 3.1.1.1 series update (halflife-server and halflife-cstrike): fix for use published dlfile exploit

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Sergiy Borodych 2004-03-04 04:19:00 UTC]

Alfred Reynolds On 12/23/2003 04:20 AM wrote
> We have released an update to the 4.1.1.1/3.1.1.1 series of the HL
> server. This update can be applied to any version of the 4.1.1.1 series
> to get it up to date.
> 
> The update can be downloaded from:
> 
> via BitTorrent
> http://www.steampowered.com/bittorrent/hlds4111e_beta.exe.torrent 
> http://www.steampowered.com/bittorrent/hlds_l_3111e_update.tar.gz.torren
> t
> 
> or via ftp
> ftp.valvesoftware.com
> Login: hlserver
> Password: hlserver
> Directory: x.1.1.1/Win32 or x.1.1.1/Linux
> 
> md5sum information:
> f81c50fe8d6a7a8914403697c719b824  hlds4111e_beta.exe
> 79baaaf4b3c7902928047f30917dc635  hlds_l_3111e_update.tar.gz
> 
> 
> Changes/Additions:
> ------------------
> * Added list of file extensions that cannot be downloaded with the
> dlfile command. The exclude list is currently: .cfg .ini .bat .exe .vbs
> .com .dll .lst .log.   This prevents the published dlfile exploit.
> 
> Bug Fixes:
> ----------
> * Fixed incorrect time base being used for client prediction on server.
> 

Please also update cstrike dll dir if it exists !

[Comment 1 SpanKY 2004-04-18 01:36:45 UTC]

3.1.1.1e is now in portage