Bug 244117

Summary: irc/unreal: Update to 5.0.3.1
Product: Ports & Packages Reporter: shon
Component: Individual Port(s)Assignee: Daniel Engberg <diizzy>
Status: Closed FIXED    
Severity: Affects Many People CC: ACCOUNT_DELETED, devnull, diizzy, koobs, rafael.grether
Priority: --- Keywords: needs-patch, security
Version: Latest   
Hardware: Any   
OS: Any   
URL: http://unrealircd.org

Description shon 2020-02-14 08:02:37 UTC 
Port is extremely old and the version in ports is no longer supported by the unrealircd team. The latest version is 5.0.3.1. Can we get this updated, please?
Comment 1 Kubilay Kocak freebsd_committer freebsd_triage 2020-02-14 09:52:56 UTC 
This issue needs a patch to progress, and the port needs a maintainer
Comment 2 Kubilay Kocak freebsd_committer freebsd_triage 2020-02-14 09:57:09 UTC 
I'll take this. If someone can assist with a patch, that would be greatly appreciated
Comment 3 Kubilay Kocak freebsd_committer freebsd_triage 2020-02-14 10:01:42 UTC 
As announced a year ago, all support for UnrealIRCd 3.2.x will stop after December 31, 2016 [1]


All UnrealIRCd versions up to and including 4.0.14 can be crashed by a remote user ... <snip> [2]

UnrealIRCd 4.0.18 (stable) is now available for download. This is a recommended upgrade because it fixes some memory leaks / security issues present in 4.0.17 and earlier version [3]

The above security issues should have VuXML entries added (in addition to the 5.x update).

[1] https://forums.unrealircd.org/viewtopic.php?f=1&t=8629
[2] https://forums.unrealircd.org/viewtopic.php?f=1&t=8751
[3] https://forums.unrealircd.org/viewtopic.php?f=1&t=8821
Comment 4 Rafael Grether 2022-03-25 21:52:41 UTC 
@koobs

I suggest closing this bug and remove this version (irc/unreal) from the tree ports, due to numerous security issues.

I will create a new port for UnrealIrcd version 6.2 (current stable). I'm working on it.
Comment 5 Daniel Engberg freebsd_committer freebsd_triage 2022-03-26 18:12:35 UTC 
(In reply to Rafael Grether from comment #4)
Sounds great!
Comment 6 commit-hook freebsd_committer freebsd_triage 2022-06-12 21:22:07 UTC 
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=215f4d24bc63a0d62fa26920e431264eaaeb2e81

commit 215f4d24bc63a0d62fa26920e431264eaaeb2e81
Author:     Daniel Engberg <diizzy@FreeBSD.org>
AuthorDate: 2022-06-12 20:59:13 +0000
Commit:     Daniel Engberg <diizzy@FreeBSD.org>
CommitDate: 2022-06-12 20:59:16 +0000

    irc/unreal: Deprecate and set expiration date to 2022-06-30

    Very outdated, declared end of life by upstream in 2016 and has known
    security vulnerabilities

    Reference: https://www.unrealircd.org/docs/UnrealIRCd_3.2.x_deprecated

    PR:             244117
    Reported by:    Rafael Grether <devnull@apt322.org>

 irc/unreal/Makefile | 3 +++
 1 file changed, 3 insertions(+)
Comment 7 Daniel Engberg freebsd_committer freebsd_triage 2022-06-12 21:23:40 UTC 
Port deprecated, if there interest in resurrecting it please open a new bug report.