Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 801397 - <net-irc/unrealircd-5.2.1.1: incorrect builtin ban exception
Summary: <net-irc/unrealircd-5.2.1.1: incorrect builtin ban exception
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal trivial
Assignee: Gentoo Security
URL: https://forums.unrealircd.org/viewtop...
Whiteboard: ~4 [noglsa]
Keywords:
Depends on:
Blocks:
 
Reported: 2021-07-09 21:04 UTC by John Helmert III
Modified: 2021-07-11 00:58 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2021-07-09 21:04:20 UTC
From URL:

UnrealIRCd 5.0.9, 5.2.0(.x) and 5.2.1-rc1 have an incorrect built-in ban exception for "127.*" which intended to exempt localhost ("127.0.0.1"). Unfortunately, the obvious fact was overlooked that this can also match hostnames such as "127.something.example.org", allowing such users to bypass kline, gline and shun.

Please bump to 5.2.1.
Comment 1 Larry the Git Cow gentoo-dev 2021-07-11 00:58:03 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=7ba4d3c4f37ea771fe2db6451b844d7196b31798

commit 7ba4d3c4f37ea771fe2db6451b844d7196b31798
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2021-07-11 00:57:43 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2021-07-11 00:57:44 +0000

    net-irc/unrealircd: drop 5.0.9.1-r1, 5.2.0.2-r1
    
    Bug: https://bugs.gentoo.org/801397
    Signed-off-by: Sam James <sam@gentoo.org>

 net-irc/unrealircd/Manifest                     |   2 -
 net-irc/unrealircd/unrealircd-5.0.9.1-r1.ebuild | 176 -----------------------
 net-irc/unrealircd/unrealircd-5.2.0.2-r1.ebuild | 177 ------------------------
 3 files changed, 355 deletions(-)

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a830d9199f54abd202b13e472e1dded4abfcc075

commit a830d9199f54abd202b13e472e1dded4abfcc075
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2021-07-11 00:57:39 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2021-07-11 00:57:39 +0000

    net-irc/unrealircd: add 5.2.1.1
    
    Bug: https://bugs.gentoo.org/801397
    Signed-off-by: Sam James <sam@gentoo.org>

 net-irc/unrealircd/Manifest                  |   1 +
 net-irc/unrealircd/unrealircd-5.2.1.1.ebuild | 177 +++++++++++++++++++++++++++
 2 files changed, 178 insertions(+)
Comment 2 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2021-07-11 00:58:49 UTC
No stable version was affected (5.0.8-r1 is our current stable version) so noglsa, closing.

Tree is now clean.