Team Fortress Classic - mikela
This list covers the releases between March 20 and April 15 that are each part of a series of security updates.

Larger changes:
  • Added privilege checking to command execution. Commands originating outside of the client are now only able to execute commands that are considered to be safe. Commands such as 'connect', 'bind', 'quit' and certain cvars such as 'cl_filterstuffcmd' are now only executable by trusted sources.
  • Setting 'cl_filterstuffcmd' to a value greater than zero (e.g. 'cl_filterstuffcmd 1') will set a number of commands that are potentially abusable, such as 'say', 'fps_max', and 'setinfo', to also be only executable by privileged sources.

Fixes:
  • Fixed intermittent double weapon firing
  • Fixed client incorrectly blocking download of custom sprays

Security fixes:
  • All custom resources downloaded from a server now have their file name's checked for safety before being allowed to download
  • Invalid file extensions are now prevented in several commands
  • Dynamic libraries are no longer searched for in custom resource directories
  • Added additional file extensions to custom resource blocked extensions list
  • Fixed buffer overflow in message delta parsing
  • Fixed RCE in weapon message handling
  • Fixed RCE in model loading
  • Fixed buffer overflows in TGA and BMP loading
  • Fixed buffer overflow in demo playback
  • Fixed buffer overflows in model name loading
  • Fixed buffer overflow in detail texture loading
  • Fixed buffer overflow in console map listing
  • Fixed command chaining in cvar's that specified config files to be passed to the 'exec' command
Team Fortress Classic - mikela
A small update for TFC is now available:

Engine
  • Fixed bug in skybox image loading
  • Fixed bug in demo command processing
  • Prevent certain path characters from being used in commands
  • Enforce certain extensions be used for files specified in some commands
Team Fortress Classic - alfred
We have updated the public release of Team Fortress Classic.

Changes in this update are:
  • Fixed crash when entering certain malformed strings into the game console. Thanks to Marshal Webb from BackConnect, Inc for reporting this.
  • Fixed crash when loading a specially crafted malformed BSP file. Thanks to Grant Hernandez (@Digital_Cold) for reporting this.
  • Fixed malformed SAV files allowing arbitrary files to be written into the game folder. Thanks to Vsevolod Saj for reporting this.
  • Fixed a crash when quickly changing weapons that are consumable. Thanks to Sam Vanheer for reporting this.
  • Fixed crash when setting custom decals
  • Fixed mouse clicks not recording reliably when in fullscreen
  • Fixed crash when using the "func_tankrocket" entity
  • Fixed spy disguise not working after a map change
Team Fortress Classic - alfred
We have updated the public release of Team Fortress Classic.

Changes in this update are:
  • Fixed crash when entering certain malformed strings into the game console. Thanks to Marshal Webb from BackConnect, Inc for reporting this.
  • Fixed crash when loading a specially crafted malformed BSP file. Thanks to Grant Hernandez (@Digital_Cold) for reporting this.
  • Fixed malformed SAV files allowing arbitrary files to be written into the game folder. Thanks to Vsevolod Saj for reporting this.
  • Fixed a crash when quickly changing weapons that are consumable. Thanks to Sam Vanheer for reporting this.
  • Fixed crash when setting custom decals
  • Fixed mouse clicks not recording reliably when in fullscreen
  • Fixed crash when using the "func_tankrocket" entity
Team Fortress Classic - alfred
We have released a Beta update for Team Fortress Classic.
Changes in this update are:
  • Fixed mouse clicks not recording reliably when in fullscreen
  • Fixed crash when using the "func_tankrocket" entity
Team Fortress Classic - alfred
We have released a Beta update for Team Fortress Classic.
Changes in this update are:
  • Fixed mouse clicks not recording reliably when in fullscreen
  • Fixed crash when using the "func_tankrocket" entity
Team Fortress Classic - alfred
We have updated the public release of Team Fortress Classic. This update contains all the changes from the recent beta, thanks to the whole community for their help with testing and suggesting new features.

Changes in this update are:
  • Converted Team Fortress Classic to the new SteamPipe content system, for optimized delivery of the game
  • Added support for Mac OS X and Linux operating systems
  • Improved OpenGL rendering pipeline and output to leverage the capabilities in todays GPU
  • Numerous bug fixes
Team Fortress Classic - alfred
We have updated the public release of Team Fortress Classic. This update contains all the changes from the recent beta, thanks to the whole community for their help with testing and suggesting new features.

Changes in this update are:
  • Converted Team Fortress Classic to the new SteamPipe content system, for optimized delivery of the game
  • Added support for Mac OS X and Linux operating systems
  • Improved OpenGL rendering pipeline and output to leverage the capabilities in todays GPU
  • Numerous bug fixes
Team Fortress Classic - alfred
We have released a Beta update for Team Fortress Classic.
Changes in this update are:
  • Increased max size of displayed servername to 64 characters
  • Door movement sound fixes, make sure you stop playing the moving sound if you get disrupted
  • Make sure the Close button has keyboard focus when you see the disconnection dialog
  • Made the play command obey speak_enabled cvar
  • Fixed crash if you hit retry while in control of a func_tank
  • Fixed sprays not loading from the correct path causing them not to update
Team Fortress Classic - alfred
We have released a Beta update for Team Fortress Classic.
Changes in this update are:
  • Increased max size of displayed servername to 64 characters
  • Door movement sound fixes, make sure you stop playing the moving sound if you get disrupted
  • Make sure the Close button has keyboard focus when you see the disconnection dialog
  • Made the play command obey speak_enabled cvar
  • Fixed crash if you hit retry while in control of a func_tank
  • Fixed sprays not loading from the correct path causing them not to update
...

Search news
Archive
2024
May   Apr   Mar   Feb   Jan  
Archives By Year
2024   2023   2022   2021   2020  
2019   2018   2017   2016   2015  
2014   2013   2012   2011   2010  
2009   2008   2007   2006   2005  
2004   2003   2002