Yesterday, it came down the grapevine that there was an RCE in the wild for my preferred IRC client, Quassel. Bad news, because it’s pre-auth, so I immediately firewalled it to only allow connections from home until a patch was public. It simply wouldn’t make do for a washed-up old hacker like myself to get pwned by my very own IRC box now would it?
This morning, still no traces of new packages according to FreeBSD’s
pkg tool. I upgraded everything else while I was there, then updated my ports tree and built the port myself, screw it. The process was actually rather painless, I’m considering building from Git to access some of the newer features early, but for now it’s nearly time for work.