¿ªÔÆÌåÓý

ctrl + shift + ? for shortcuts
© 2025 Groups.io
Date

UPDATING BPQ 32 from 6.0.23.1 to BETA

 

Hello Group;
?
I'm attempting to update my system to the BETA Aug 21 2024 latest
This is my first time updating and have no idea where to find my BPQ.DLL files to update or where to place the downloaded .DLL any help?


Re: Not accepting mail to yourself...

 

I received a different message from K4WOF addressed to KD4WLE, but it was addressed to KD4WLE.FL.USA.NOAM instead of KD4WLE.#SFL.FL.USA.NOAM. I'm not sure why WB4MOZ forwarded a message addressed to ".FL.USA.NOAM" to Maryland or why N3HYM forwarded it to Wisconsin, but it appears that's what happened. It appears that my BBS forwarded it to KD4WLE despite the incorrect address.

From: K4WOF@...
To: KD4WLE@...

R:240829/0010Z 14493@N3HYM.#FRDK.MD.USA.NOAM BPQ6.0.24
R:240829/0009Z 19760@WB4MOZ.#PBFL.FL.USA.NOAM BPQ6.0.24
R:240828/2352Z 18149@... LinBPQ6.0.24

Jerry K4WOF should consult with fellow Floridians regarding what his address should be and also create a user for KD4WLE with an address of? KD4WLE.#SFL.FL.USA.NOAM.

73,
Lee K5DAT
Shawano, WI


On Thu, Aug 29, 2024 at 5:37?PM j.lineback via <kilowatt=[email protected]> wrote:


This is Jerry K4WOF.

Definitely not an expert and will have to study what happened and why.

Meanwhile I took the node offline to prevent recurrence.

Jer


Sent with Proton Mail secure email.

On Thursday, August 29th, 2024 at 5:42 PM, John - wb4moz via <wb4moz=[email protected]> wrote:

> My guess is that since the message was forwarded from k4wof to me it
> could not be forwarded back his way so my bbs looked at the next HA
> (USA) and sent it on - same as Mark couldn't send it back to me.
>
> The real question is why Jerry (k4wof) forwarded a message addressed to
> his bbs.
>
> If this is perceived to be a continuing issue maybe John can look at
> it.. I'm not sure there is an easy solution as some instate traffic has
> to go out state to get to the proper destination. Maybe place it on
> hold if there is no implicit routing and the HA state id's are equal..
>
> 73 John wb4moz
>
> On 8/29/2024 1:15 PM, Charles Hargrove wrote:
>
> > I would also question why WB4MOZ passed it along to TX when it should
> > have remained in FL. So two issues are at play - proper hierarchical
> > addressing and proper forwarding.
> >
> > > R:240829/0110Z 19762@WB4MOZ.#PBFL.FL.USA.NOAM BPQ6.0.24
> > > R:240829/0026Z 18150@... LinBPQ6.0.24
> > > R:240829/0026Z 21515@KD4WLE.#SFL.FL.USA.NOAM LinBPQ6.0.23
>
>
>
>
>






Re: Not accepting mail to yourself...

 

¿ªÔÆÌåÓý

I also noticed this today. I¡¯m going to assume it is also an issue with his HA and HR at his system. ?I see the same message looping again and again..

?

R:240829/0247Z 18152@... LinBPQ6.0.24

R:240829/0157Z 14496@N3HYM.#FRDK.MD.USA.NOAM BPQ6.0.24

R:240829/0110Z 19762@WB4MOZ.#PBFL.FL.USA.NOAM BPQ6.0.24

R:240829/0026Z 18150@... LinBPQ6.0.24

R:240829/0026Z 21515@KD4WLE.#SFL.FL.USA.NOAM LinBPQ6.0.23

?

Note ¨C his call is in the R line twice, and he¡¯s using a fl,usa.noam, this isn¡¯t helping either. I¡¯ll be holding his traffic until this is resolved.

?

From: [email protected] <[email protected]> on behalf of John - wb4moz via groups.io <wb4moz@...>
Date: Thursday, August 29, 2024 at 5:42
?PM
To: [email protected] <[email protected]>
Subject: Re: [bpq32] Not accepting mail to yourself...

My guess is that since the message was forwarded from k4wof to me it
could not be forwarded back his way so my bbs looked at the next HA
(USA) and sent it on - same as Mark couldn't send it back to me.

The real question is why Jerry (k4wof) forwarded a message addressed to
his bbs.

If this is perceived to be a continuing issue maybe John can look at
it.. I'm not sure there is an easy solution as some instate traffic has
to go out state to get to the proper destination.? Maybe place it on
hold if there is no implicit routing and the HA state id's are equal..

73? John? wb4moz

On 8/29/2024 1:15 PM, Charles Hargrove wrote:
> I would also question why WB4MOZ passed it along to TX when it should
> have remained in FL. So two issues are at play - proper hierarchical
> addressing and proper forwarding.
>
>> R:240829/0110Z 19762@WB4MOZ.#PBFL.FL.USA.NOAM BPQ6.0.24
>> R:240829/0026Z 18150@... LinBPQ6.0.24
>> R:240829/0026Z 21515@KD4WLE.#SFL.FL.USA.NOAM LinBPQ6.0.23
>






Re: Not accepting mail to yourself...

 

This is Jerry K4WOF.

Definitely not an expert and will have to study what happened and why.

Meanwhile I took the node offline to prevent recurrence.

Jer


Sent with Proton Mail secure email.

On Thursday, August 29th, 2024 at 5:42 PM, John - wb4moz via groups.io <wb4moz@...> wrote:

My guess is that since the message was forwarded from k4wof to me it
could not be forwarded back his way so my bbs looked at the next HA
(USA) and sent it on - same as Mark couldn't send it back to me.

The real question is why Jerry (k4wof) forwarded a message addressed to
his bbs.

If this is perceived to be a continuing issue maybe John can look at
it.. I'm not sure there is an easy solution as some instate traffic has
to go out state to get to the proper destination. Maybe place it on
hold if there is no implicit routing and the HA state id's are equal..

73 John wb4moz

On 8/29/2024 1:15 PM, Charles Hargrove wrote:

I would also question why WB4MOZ passed it along to TX when it should
have remained in FL. So two issues are at play - proper hierarchical
addressing and proper forwarding.

R:240829/0110Z 19762@WB4MOZ.#PBFL.FL.USA.NOAM BPQ6.0.24
R:240829/0026Z 18150@... LinBPQ6.0.24
R:240829/0026Z 21515@KD4WLE.#SFL.FL.USA.NOAM LinBPQ6.0.23




Re: Not accepting mail to yourself...

 

My guess is that since the message was forwarded from k4wof to me it could not be forwarded back his way so my bbs looked at the next HA (USA) and sent it on - same as Mark couldn't send it back to me.

The real question is why Jerry (k4wof) forwarded a message addressed to his bbs.

If this is perceived to be a continuing issue maybe John can look at it.. I'm not sure there is an easy solution as some instate traffic has to go out state to get to the proper destination.? Maybe place it on hold if there is no implicit routing and the HA state id's are equal..

73? John? wb4moz

On 8/29/2024 1:15 PM, Charles Hargrove wrote:
I would also question why WB4MOZ passed it along to TX when it should
have remained in FL. So two issues are at play - proper hierarchical
addressing and proper forwarding.

R:240829/0110Z 19762@WB4MOZ.#PBFL.FL.USA.NOAM BPQ6.0.24
R:240829/0026Z 18150@... LinBPQ6.0.24
R:240829/0026Z 21515@KD4WLE.#SFL.FL.USA.NOAM LinBPQ6.0.23


Re: Not accepting mail to yourself...

 

I would also question why WB4MOZ passed it along to TX when it should
have remained in FL. So two issues are at play - proper hierarchical
addressing and proper forwarding.

R:240829/0110Z 19762@WB4MOZ.#PBFL.FL.USA.NOAM BPQ6.0.24
R:240829/0026Z 18150@... LinBPQ6.0.24
R:240829/0026Z 21515@KD4WLE.#SFL.FL.USA.NOAM LinBPQ6.0.23
--
Charles J. Hargrove - N2NOV
NYC-ARECS/RACES Citywide Radio Officer/Skywarn Coord.

NYC-ARECS/RACES Nets 441.100/136.5 PL
ARnewsline Broadcast Mon. @ 8:00PM
NYC-ARECS Weekly Net Mon. @ 8:30PM


NY-NBEMS Net Saturdays @ 10AM & USeast-NBEMS Net Wednesdays @ 7PM
on 7.036 Mhz USB (alt 3.536)/1500 hz waterfall spot; MFSK-16 or 32

"Information is the oxygen of the modern age. It seeps through the walls topped
by barbed wire, it wafts across the electrified borders." - Ronald Reagan

"The more corrupt the state, the more it legislates." - Tacitus

"Molann an obair an fear" - Irish Saying
(The work praises the man.)

"No matter how big and powerful government gets, and the many services it
provides, it can never take the place of volunteers." - Ronald Reagan


Not accepting mail to yourself...

 

Pretty sure this is what is happening, so everyone be sure you can accept and hold messages addressed to you.
?
?
I received a personal message on my BBS today addressed from KD4WLE and addressed to K4WOF@...
?
The status on my BBS was PN meaning it was not forwarded or read.? Looking at the messages I could see it was not queued to be forwarded, which seemed strange. Even if I did not have a FL.USA.NOAM forward record (but I do) it should have forwarded to my WW forward record, but it didn't.? More searching and this is the R lines in the message.
?
R:240829/0110Z 19762@WB4MOZ.#PBFL.FL.USA.NOAM BPQ6.0.24
R:240829/0026Z 18150@... LinBPQ6.0.24
R:240829/0026Z 21515@KD4WLE.#SFL.FL.USA.NOAM LinBPQ6.0.23
?
You can see that KD4WLE forwarded it directly to the recipient, K4WOF, but he didn't keep it. He forwarded it on to WB4MOZ, who sent it to me.? Well, WB4MOZ is my forwarding partner for FL.USA.NOAM so BPQ would not send it back to the very station that sent it to me, so I am assuming it just pauses without knowing exactly what to do with it. And I, of course, found the message without it being queued so I took notice and started searching for a reason.
?
Also note the middle R line has this... K4WOF.K4WOF.FL.USA.NOAM
?
So it appears that K4WOF may have his HR and his HA not correct in his configuration.? I think this may be preventing him from actually stopping the forward process when he receives messages addressed to him.? That is, BPQ does not recognize that his BBS is the destination BBS because the HA and HR may be wrong.
?
If that is what is happening it is caused by a misunderstanding of what an HA is as compared to an HR.?? So, it is not something I can fix, especially because I can't send him messages if his BBS does not think they are for him, since he forwards them on...
?
?
So, anyone else have any thoughts on this?? If K4WOF (or close friend) sees this maybe he will check his HA and HR entries in his BBS and confirm or debunk my suspicions and add some additional thoughts.
?
?
73,
Mark
N5MDT
?
?


Re: piQtBPQAPRS on Raspbian (bookworm) 64bit

 

Thank you!!
?
Looks like you started a new repository for QtBPQAPRS. :)
It will be awesome to be able to recompile each piece if needed.?
?
-Jon


Re: piQtBPQAPRS on Raspbian (bookworm) 64bit

 

¿ªÔÆÌåÓý

Yes, you need a 64 bit version. I've uploaded piBPQAPRS64 to my beta downloads.

73,
John

On 27/08/2024 23:13, Jon Simonds wrote:

I apologize if this has been covered, I searched the messages, but didn't seem to find anything.
?
When I try to run the binary piQtBPQAPRS, I receive this error:
./piQtBPQAPRS: error while loading shared libraries: libQt5Widgets.so.5: cannot open shared object file: No such file or directory
?
When I install/reinstall with:? sudo apt install libqt5widgets5
?
I get a message that is is already the latest version:?
libqt5widgets5 is already the newest version (5.15.8+dfsg-11+deb12u2).
?
I had the same error with piBPQConfigGen, but was able to recompile that on the pi, and it works now.
I didn't see a way to recompile the piQtBPQAPRS, but I feel like I must be missing something for the provided binaries to not run correctly.
?
Even if I try the non-QT version: piBPQAPRS I get:?
./piBPQAPRS: error while loading shared libraries: libjpeg.so.62: cannot open shared object file: No such file or directory
which also says I already have the latest version installed.
?
Wait, is this because I'm running 64bit?? I just realized that piQtSoundModem64 runs without issue!
I don't see a piQtBPQAPRS64.
?
Would it be easier to just start over and install Raspbian 32bit???
?
Sorry for all the questions, any help will be greatly appreciated!
?
73
Jon
KC4NWK


piQtBPQAPRS on Raspbian (bookworm) 64bit

 

I apologize if this has been covered, I searched the messages, but didn't seem to find anything.
?
When I try to run the binary piQtBPQAPRS, I receive this error:
./piQtBPQAPRS: error while loading shared libraries: libQt5Widgets.so.5: cannot open shared object file: No such file or directory
?
When I install/reinstall with:? sudo apt install libqt5widgets5
?
I get a message that is is already the latest version:?
libqt5widgets5 is already the newest version (5.15.8+dfsg-11+deb12u2).
?
I had the same error with piBPQConfigGen, but was able to recompile that on the pi, and it works now.
I didn't see a way to recompile the piQtBPQAPRS, but I feel like I must be missing something for the provided binaries to not run correctly.
?
Even if I try the non-QT version: piBPQAPRS I get:?
./piBPQAPRS: error while loading shared libraries: libjpeg.so.62: cannot open shared object file: No such file or directory
which also says I already have the latest version installed.
?
Wait, is this because I'm running 64bit?? I just realized that piQtSoundModem64 runs without issue!
I don't see a piQtBPQAPRS64.
?
Would it be easier to just start over and install Raspbian 32bit???
?
Sorry for all the questions, any help will be greatly appreciated!
?
73
Jon
KC4NWK


Re: BPQ32/LinBPQ vulnerability.

 

¿ªÔÆÌåÓý

CVE-2024-34087

73, John


On 27/08/2024 17:39, Eric H. Christensen via groups.io wrote:

We're CVEs issued for these vulnerabilities?

73,
Eric WG3K
FM18rp
Packet: WG3K@WG3K.#SMD.MD.USA.NOAM
E-Mail: wg3k@...

Sent from Proton Mail Android


-------- Original Message --------
On 8/27/24 09:23, John G8BPQ <john.wiseman@...> wrote:

 Someone has published an exploit for two buffer overflow vulnerability
 in BPQ32/LinBPQ.
 
 The most serious one was fixed in 6.0.24.36 but many people may still be
 running older versions.
 
 I suggest you update the the latest versions of bpq32 and linbpq
 (6.0.24.42) from my beta download area. If you are running on Windows I
 suggest you update BPQMail.exe and BPQChat.exe as well as bpq32.dll as
 there may be incompatibly with older versions.
 
 The latest source in in my git repositories.
 
 I will issue a new installer for Windows a soon a possible but that may
 take a few days.
 
 73, John
 
 
 
 
 







Hanging Connects

Richard Hendricks - KE0GB
 

John:
?
I've been having some issues with "hanging" connects that never seem to go away.? Here's an example:
?

COSCO:KE0GB-7} G8BPQ Network System 6.0.24.40 for Linux (820)

Circuit(#USWCH:WA3WLH-14 WA3WLH-14)<--> Host02(COSCHT:KE0GB-11)? <-----"Re-established" connect

Circuit(UCNCHT:KC6UCN-11 KC6UCN-11)<--> Host01(COSCHT:KE0GB-11)

Host15(COSCHT:KE0GB-11) <--> Circuit(SOLCHT:N0HI-11 KE0GB-11)

Host14(COSCHT:KE0GB-11) <--> Circuit(YZBCHT:KB5YZB-11 KE0GB-11)

Host13(COSCHT:KE0GB-11) <--> Circuit(WEACHT:KC0WEA-4 KE0GB-11)

(Closing)? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? Circuit(#USWCH:WA3WLH-14 KE0GB-11)? ? ? <-----"Hanging" connect.

TNC Uplink Port 2/1(KE0GB)

?

Is there a command to force the (Closing) connect to clear?

I'll update to 24.42 per your recommendation regarding the CVE issues.

?

73 - Rick

?


Re: BPQ32/LinBPQ vulnerability.

 

CVE-2024-34087


Re: BPQ32/LinBPQ vulnerability.

 

¿ªÔÆÌåÓý

Thank you Eric and Ben. Learned something new today.
73 Chris
ww2bsa

-------- Original message --------
From: "Eric H. Christensen via groups.io" <wg3k@...>
Date: 8/27/24 1:21 PM (GMT-05:00)
Subject: Re: [bpq32] BPQ32/LinBPQ vulnerability.

Common Vulnerability and Exposures[0], or CVE, is a system that provides a reference method for vulnerabilities.? A unique identifier is given to every vulnerability along with related information about the vulnerability, how it can affect a system (Common Weakness Enumeration[1] or CWE), how "bad" it is (Common Vulnerability Scoring System or CVSS), and other information from upstream so that users and downstream software developers can determine how their systems may be affected.? It is extremely important for libraries and other software that are integrated into other software to receive a CVE number; probably less so in this particular case.? When John said that someone had published the vulnerabilities I didn't know if he meant that they had been assigned a CVE number or just that he had received an email (or similar) that showed how the vulnerability could be executed.

[0] https://en.wikipedia.org/wiki/Common_Vulnerabilities_and_Exposures
[1] https://cwe.mitre.org

73,
Eric WG3K
FM18rp
Packet: WG3K@WG3K.#SMD.MD.USA.NOAM
E-Mail: wg3k@...


On Tuesday, August 27th, 2024 at 12:43, Chris Lance WW2BSA <Ww2bsa@...> wrote:

> Hmmm...never heard of that....what is a CVE and why is it important?Chris
> Ww2bsa
>
> -------- Original message --------
> From: "Eric H. Christensen via groups.io" <wg3k@...>
> Date: 8/27/24 12:39 PM (GMT-05:00)
> To: [email protected]
> Subject: Re: [bpq32] BPQ32/LinBPQ vulnerability.
>
> We're CVEs issued for these vulnerabilities?
>
> 73,
> Eric WG3K
> FM18rp
> Packet: WG3K@WG3K.#SMD.MD.USA.NOAM
> E-Mail: wg3k@...
>
> Sent from Proton Mail Android
>
>
> -------- Original Message --------
> On 8/27/24 09:23, John G8BPQ <john.wiseman@...> wrote:
>
> >? Someone has published an exploit for two buffer overflow vulnerability
> >? in BPQ32/LinBPQ.
> >?
> >? The most serious one was fixed in 6.0.24.36 but many people may still be
> >? running older versions.
> >?
> >? I suggest you update the the latest versions of bpq32 and linbpq
> >? (6.0.24.42) from my beta download area. If you are running on Windows I
> >? suggest you update BPQMail.exe and BPQChat.exe as well as bpq32.dll as
> >? there may be incompatibly with older versions.
> >?
> >? The latest source in in my git repositories.
> >?
> >? I will issue a new installer for Windows a soon a possible but that may
> >? take a few days.
> >?
> >? 73, John
> >?
> >?
> >?
> >?
> >?
> >
>
>
>
>
>
>






Re: BPQ32/LinBPQ vulnerability.

 

Common Vulnerability and Exposures[0], or CVE, is a system that provides a reference method for vulnerabilities. A unique identifier is given to every vulnerability along with related information about the vulnerability, how it can affect a system (Common Weakness Enumeration[1] or CWE), how "bad" it is (Common Vulnerability Scoring System or CVSS), and other information from upstream so that users and downstream software developers can determine how their systems may be affected. It is extremely important for libraries and other software that are integrated into other software to receive a CVE number; probably less so in this particular case. When John said that someone had published the vulnerabilities I didn't know if he meant that they had been assigned a CVE number or just that he had received an email (or similar) that showed how the vulnerability could be executed.

[0]
[1]

73,
Eric WG3K
FM18rp
Packet: WG3K@WG3K.#SMD.MD.USA.NOAM
E-Mail: wg3k@...

On Tuesday, August 27th, 2024 at 12:43, Chris Lance WW2BSA <Ww2bsa@...> wrote:

Hmmm...never heard of that....what is a CVE and why is it important?Chris
Ww2bsa

-------- Original message --------
From: "Eric H. Christensen via groups.io" <wg3k@...>
Date: 8/27/24 12:39 PM (GMT-05:00)
To: [email protected]
Subject: Re: [bpq32] BPQ32/LinBPQ vulnerability.

We're CVEs issued for these vulnerabilities?

73,
Eric WG3K
FM18rp
Packet: WG3K@WG3K.#SMD.MD.USA.NOAM
E-Mail: wg3k@...

Sent from Proton Mail Android


-------- Original Message --------
On 8/27/24 09:23, John G8BPQ <john.wiseman@...> wrote:

? Someone has published an exploit for two buffer overflow vulnerability
? in BPQ32/LinBPQ.
?
? The most serious one was fixed in 6.0.24.36 but many people may still be
? running older versions.
?
? I suggest you update the the latest versions of bpq32 and linbpq
? (6.0.24.42) from my beta download area. If you are running on Windows I
? suggest you update BPQMail.exe and BPQChat.exe as well as bpq32.dll as
? there may be incompatibly with older versions.
?
? The latest source in in my git repositories.
?
? I will issue a new installer for Windows a soon a possible but that may
? take a few days.
?
? 73, John
?
?
?
?
?





Re: BPQ32/LinBPQ vulnerability.

 

https://en.m.wikipedia.org/wiki/Common_Vulnerabilities_and_Exposures

The security community uses a vulnerabiliy's CVE number when working with a vulnerability.? The data in the CVR database links to affected versions, workarounds, PoCs, etc...? It is a critical reference when reporting issues, building detections, doing vulnerability scanning, etc...?

Without something like a CVE number it is difficult to determine if you have found a new issue or something that has already been reported.? It also differentiates similar vulnerabilities in a project that happened at different times.

73,
Ben KU0HN



-------- Original Message --------
On 8/27/24 11:43 AM, Chris Lance WW2BSA wrote:
Hmmm...never heard of that....what is a CVE and why is it important?
Chris
Ww2bsa

-------- Original message --------
From: "Eric H. Christensen via groups.io" <wg3k@...>
Date: 8/27/24 12:39 PM (GMT-05:00)
Subject: Re: [bpq32] BPQ32/LinBPQ vulnerability.

We're CVEs issued for these vulnerabilities?

73,
Eric WG3K
FM18rp
Packet: WG3K@WG3K.#SMD.MD.USA.NOAM
E-Mail: wg3k@...

Sent from Proton Mail Android


-------- Original Message --------
On 8/27/24 09:23, John G8BPQ <john.wiseman@...> wrote:

>? Someone has published an exploit for two buffer overflow vulnerability
>? in BPQ32/LinBPQ.
>?
>? The most serious one was fixed in 6.0.24.36 but many people may still be
>? running older versions.
>?
>? I suggest you update the the latest versions of bpq32 and linbpq
>? (6.0.24.42) from my beta download area. If you are running on Windows I
>? suggest you update BPQMail.exe and BPQChat.exe as well as bpq32.dll as
>? there may be incompatibly with older versions.
>?
>? The latest source in in my git repositories.
>?
>? I will issue a new installer for Windows a soon a possible but that may
>? take a few days.
>?
>? 73, John
>?
>?
>?
>?
>?
>






Re: BPQ32/LinBPQ vulnerability.

 

¿ªÔÆÌåÓý

Hmmm...never heard of that....what is a CVE and why is it important?
Chris
Ww2bsa

-------- Original message --------
From: "Eric H. Christensen via groups.io" <wg3k@...>
Date: 8/27/24 12:39 PM (GMT-05:00)
Subject: Re: [bpq32] BPQ32/LinBPQ vulnerability.

We're CVEs issued for these vulnerabilities?

73,
Eric WG3K
FM18rp
Packet: WG3K@WG3K.#SMD.MD.USA.NOAM
E-Mail: wg3k@...

Sent from Proton Mail Android


-------- Original Message --------
On 8/27/24 09:23, John G8BPQ <john.wiseman@...> wrote:

>? Someone has published an exploit for two buffer overflow vulnerability
>? in BPQ32/LinBPQ.
>?
>? The most serious one was fixed in 6.0.24.36 but many people may still be
>? running older versions.
>?
>? I suggest you update the the latest versions of bpq32 and linbpq
>? (6.0.24.42) from my beta download area. If you are running on Windows I
>? suggest you update BPQMail.exe and BPQChat.exe as well as bpq32.dll as
>? there may be incompatibly with older versions.
>?
>? The latest source in in my git repositories.
>?
>? I will issue a new installer for Windows a soon a possible but that may
>? take a few days.
>?
>? 73, John
>?
>?
>?
>?
>?
>






Re: BPQ32/LinBPQ vulnerability.

 

We're CVEs issued for these vulnerabilities?

73,
Eric WG3K
FM18rp
Packet: WG3K@WG3K.#SMD.MD.USA.NOAM
E-Mail: wg3k@...

Sent from Proton Mail Android

-------- Original Message --------
On 8/27/24 09:23, John G8BPQ <john.wiseman@...> wrote:

Someone has published an exploit for two buffer overflow vulnerability
in BPQ32/LinBPQ.

The most serious one was fixed in 6.0.24.36 but many people may still be
running older versions.

I suggest you update the the latest versions of bpq32 and linbpq
(6.0.24.42) from my beta download area. If you are running on Windows I
suggest you update BPQMail.exe and BPQChat.exe as well as bpq32.dll as
there may be incompatibly with older versions.

The latest source in in my git repositories.

I will issue a new installer for Windows a soon a possible but that may
take a few days.

73, John






Re: BPQ32/LinBPQ vulnerability.

 

BPQMail and BPQChat have also been updated....


BPQ32/LinBPQ vulnerability.

 

Someone has published an exploit for two buffer overflow vulnerability in BPQ32/LinBPQ.

The most serious one was fixed in 6.0.24.36 but many people may still be running older versions.

I suggest you update the the latest versions of bpq32 and linbpq (6.0.24.42) from my beta download area. If you are running on Windows I suggest you update BPQMail.exe and BPQChat.exe as well as bpq32.dll as there may be incompatibly with older versions.

The latest source in in my git repositories.

I will issue a new installer for Windows a soon a possible but that may take a few days.

73, John