R1Q2 users

[Bleach]

im running vanilla q2..... is this a bad thing?

[X'tyfe]

no, but its probably very slow 

[Slikkster]

Console, I'm using Solo Senshi's Q3Plug website to launch tastyspleen games, and noticed it's reporting an out-of-date R1Q2 version that should be updated due to security issues.  I don't know if this is old news or not, but  here's the blurb from the R1Q2 site:

While reviewing the Q2Admin code, I have discovered several critical vulnerabilities in the handling of certain commands that can lead to arbitrary code execution. An updated version, 1.17.44, is now available. Please update any servers using 1.17.43 immediately and please notify any admins you personally know who may be running vulnerable versions.

Linux binary:
http://r-1.ch/q2admin-1.17.44-linux-update.zip

Win32 binary:
http://r-1.ch/q2admin-1.17.44-win32-update.zip

Source code:
http://r-1.ch/q2admin-1.17.44-source.zip

Changes:

Patched two critical security bugs exploitable by remote users.

Patched a security bug exploitable by users with rcon.

Improved 'whois' command so it does not crash the server.

Long lrcon commands should no longer crash the server.

Removed broken NoCheat 2.34 version checking.

Added proper GPL headers to the source code.


Full details of the security issues will be released in three months.

[Bleach]

slow? i dunno, i usually get around 80 fps, and on tastyspleen servers about 60-80 ping

note: this is in software mode.. i dont have a video card

[X'tyfe]

SOFTWARE MODE? HOLY FUCK!!
upgrade is an understatment 

i had no idea people still used that

[Bleach]

well im fairly recently back from some kerouac style traveling, its not my computer and the guy im living with doesnt want me fucking with it... so software mode it is 

[X'tyfe]

gah that sucks

[Admin]

Console, I'm using Solo Senshi's Q3Plug website to launch tastyspleen games, and noticed it's reporting an out-of-date R1Q2 version that should be updated due to security issues.

Hi Slikk,

Thanks for the heads up.  Wow, I didn't realize our Q2Admin version was publicized like that. 


Regards,

[X'tyfe]

whats wrong with people knowing what version you use? i thought that would be a good thing

[naymlis]

who said there was something wrong with it?

edit: oh, nvm i see console frown now.. probably since there might be exploits in some of the previous versions and if someone who knows about them sees that he's running the previous version he can do something bad to it? dunno just a guess

[X'tyfe]

oh ya :p didnt think of that