| ID
| Status
| Description
| Additional Info
|
| C343-21
| Open
| Pets can be pulled through closed doors with a leash.
|
|
| C343-38
| Open
| Dismounting or kicking a monster that jumps may result in landing on the wrong side of a wall.
|
|
| C343-370
| Open
| Travel (_) command can get stuck trying to plot a path past an interesting dungeon feature, for example, a trap or fountain.
|
|
| C361-5
| Help
| When getting disconnected from a game running via telnet or ssh, the game may go into an infinite loop instead of aborting.
|
|
| C364-1
| fixed
| Game may crash if a monster looks at certain tins.
|
|
| C364-2
| fixed
| Hero can have a chain but no iron ball in rare cases.
|
|
| C364-3
| fixed
| Extremely long value for the MENUCOLOR configuration file option
can cause a buffer overflow resulting in a crash or remote code
execution/privilege escalation.
CVE-2020-5212
|
|
| C364-4
| fixed
| Too long value for the SYMBOL configuration file option can cause
a buffer overflow resulting in a crash or remote code execution/privilege
escalation.
CVE-2020-5213
|
|
| C364-5
| fixed
| Invalid extended command in value for the AUTOCOMPLETE configuration
file option can cause a buffer overflow resulting in a crash or
remote code execution/privilege escalation.
CVE-2020-5211
|
|
| C364-6
| fixed
| Detecting an unknown configuration file option can cause a buffer
overflow resulting in a crash or remote code execution/privilege
escalation.
CVE-2020-5214
|
|
| C364-7
| fixed
| Invalid argument to the -w command line option can cause a buffer overflow
resulting in a crash or remote code execution/privilege escalation.
CVE-2020-5210
|
|
| C364-8
| fixed
| Unknown options starting with -de and -i can cause a buffer overflow
resulting in a crash or remote code execution/privilege escalation.
CVE-2020-5209
|
|
|
|
| (related spoiler bugs)
|
|