Accepted: wesnoth, wesnoth, wesnoth, wesnoth, wesnoth, wesnoth_1.1.8-1ubuntu0.2_amd64_translations.tar.gz, wesnoth_1.1.8-1ubuntu0.2_i386_translations.tar.gz, wesnoth_1.1.8-1ubuntu0.2_powerpc_translations.tar.gz, wesnoth_1.1.8-1ubuntu0.2_sparc_translations.tar.gz 1.1.8-1ubuntu0.2 (source, amd64, i386, powerpc, sparc, raw-translations, raw-translations, raw-translations, raw-translations)
Ubuntu Installer
archive at ubuntu.com
Fri Jan 4 18:56:52 GMT 2008
Accepted:
OK: wesnoth_1.1.8.orig.tar.gz
OK: wesnoth_1.1.8-1ubuntu0.2.diff.gz
OK: wesnoth_1.1.8-1ubuntu0.2.dsc
-> Component: universe Section: games
OK: wesnoth_1.1.8-1ubuntu0.2_amd64.deb
OK: wesnoth-editor_1.1.8-1ubuntu0.2_amd64.deb
OK: wesnoth-server_1.1.8-1ubuntu0.2_amd64.deb
OK: wesnoth_1.1.8-1ubuntu0.2_i386.deb
OK: wesnoth-data_1.1.8-1ubuntu0.2_all.deb
OK: wesnoth-editor_1.1.8-1ubuntu0.2_i386.deb
OK: wesnoth-ei_1.1.8-1ubuntu0.2_all.deb
OK: wesnoth-httt_1.1.8-1ubuntu0.2_all.deb
OK: wesnoth-music_1.1.8-1ubuntu0.2_all.deb
OK: wesnoth-server_1.1.8-1ubuntu0.2_i386.deb
OK: wesnoth-trow_1.1.8-1ubuntu0.2_all.deb
OK: wesnoth-tsg_1.1.8-1ubuntu0.2_all.deb
OK: wesnoth-ttb_1.1.8-1ubuntu0.2_all.deb
OK: wesnoth-utbs_1.1.8-1ubuntu0.2_all.deb
OK: wesnoth_1.1.8-1ubuntu0.2_powerpc.deb
OK: wesnoth-editor_1.1.8-1ubuntu0.2_powerpc.deb
OK: wesnoth-server_1.1.8-1ubuntu0.2_powerpc.deb
OK: wesnoth_1.1.8-1ubuntu0.2_sparc.deb
OK: wesnoth-editor_1.1.8-1ubuntu0.2_sparc.deb
OK: wesnoth-server_1.1.8-1ubuntu0.2_sparc.deb
OK: wesnoth_1.1.8-1ubuntu0.2_amd64_translations.tar.gz
OK: wesnoth_1.1.8-1ubuntu0.2_i386_translations.tar.gz
OK: wesnoth_1.1.8-1ubuntu0.2_powerpc_translations.tar.gz
OK: wesnoth_1.1.8-1ubuntu0.2_sparc_translations.tar.gz
Format: 1.7
Date: Tue, 04 Dec 2007 16:59:01 +0100
Source: wesnoth
Binary: wesnoth wesnoth-data wesnoth-editor wesnoth-ei wesnoth-httt wesnoth-music wesnoth-server wesnoth-trow wesnoth-tsg wesnoth-ttb wesnoth-utbs
Architecture: amd64_translations amd64 i386_translations all i386 powerpc_translations powerpc source sparc_translations sparc
Version: 1.1.8-1ubuntu0.2
Distribution: edgy-security
Urgency: low
Maintainer: Isaac Clerencia <isaac at debian.org>
Changed-By: Stephan Hermann <sh at sourcecode.de>
Description:
wesnoth - fantasy turn-based strategy game
wesnoth-editor - map editor for Wesnoth
wesnoth-server - multiplayer network server for Wesnoth
wesnoth-data - data files for Wesnoth
wesnoth-ei - Eastern Invasion official campaign for Wesnoth
wesnoth-httt - Heir to the Throne official campaign for Wesnoth
wesnoth-music - music files for Wesnoth
wesnoth-trow - The Rise of Wesnoth official campaign for Wesnoth
wesnoth-tsg - The South Guard official campaign for Wesnoth
wesnoth-ttb - A Tale of Two Brothers official campaign for Wesnoth
wesnoth-utbs - Under the Burning Suns official campaign for Wesnoth
Changes:
wesnoth (1.1.8-1ubuntu0.2) edgy-security; urgency=low
.
* SECURITY UPDATE: wesnoth has several vulnerabilities:
+ CVE-2007-3917: The multiplayer engine in Wesnoth 1.2.x before 1.2.7 and
1.3.x before 1.3.9 allows remote servers to cause a denial of service (crash)
via a long message with multibyte characters that can produce an invalid UTF-8
string after it is truncated, which triggers an uncaught exception, involving
the truncate_message function in server/server.cpp. NOTE: this issue affects
both clients and servers.
+ CVE-2007-5742: Directory traversal vulnerability in the WML engine
preprocessor for Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows
remote attackers to read arbitrary files via ".." sequences in unknown
vectors.
+ CVE-2007-6201: Unspecified vulnerability in Wesnoth before 1.2.8 allows
attackers to cause a denial of service (hang) via a "faulty add-on" and
possibly execute other commands via unknown vectors related to the turn_cmd
option
* src/display.cpp, src/map_label.cpp, src/server/server.cpp (2007-3917)
+ Applied patch by upstream
+ Link 1: http://svn.gna.org/viewcvs/wesnoth/branches/1.2/src/server/server.cpp?rev=20809&r1=20174&r2=20809
+ Link 2: http://svn.gna.org/viewcvs/wesnoth/branches/1.2/src/map_label.cpp?r2=20802&rev=20802&r1=13482&dir_pagestart=50
+ Link 3: http://svn.gna.org/viewcvs/wesnoth/branches/1.2/src/display.cpp?rev=20786&r1=16280&r2=20786
* src/serialization/preprocessor.cpp (2007-5742):
+ Applied patch by upstream
+ Link: http://svn.gna.org/viewcvs/wesnoth/branches/1.2/src/serialization/preprocessor.cpp?rev=21904&r1=12381&r2=21904
* src/playsingle_controller.cpp, src/preferences.cpp (2007-6201):
+ Applied patch by upstream
+ Link 1: http://svn.gna.org/viewcvs/wesnoth/branches/1.2/src/playsingle_controller.cpp?r2=21907&rev=21907&r1=16732&dir_pagestart=100
+ Link 2: http://svn.gna.org/viewcvs/wesnoth/branches/1.2/src/preferences.cpp?r2=21907&rev=21907&r1=18008&dir_pagestart=100
* References:
CVE-2007-3917
CVE-2007-5742
CVE-2007-6201
Files:
f0a2d20ac4e9de8481e64b80fb247691 1924520 games optional wesnoth_1.1.8-1ubuntu0.2_amd64.deb
35473ecdf9860b3cf972762c9291ef35 292712 games optional wesnoth-server_1.1.8-1ubuntu0.2_amd64.deb
37f216d692c2c31f70c4c83ae8c1bdcf 1517240 games optional wesnoth-editor_1.1.8-1ubuntu0.2_amd64.deb
61abd92a6842b09c1e3b47f54b9243df 17773955 raw-translations - wesnoth_1.1.8-1ubuntu0.2_amd64_translations.tar.gz
fded872a1fbd679823fdd8840f0af9fb 24133260 games optional wesnoth-data_1.1.8-1ubuntu0.2_all.deb
50f449d0107119864d27bed2218ae9e5 25571690 games optional wesnoth-music_1.1.8-1ubuntu0.2_all.deb
420d1b9a6d30253fcee2a9be89f493d4 4798960 games optional wesnoth-httt_1.1.8-1ubuntu0.2_all.deb
2fd7c2d17d0d26b9078cea0d46d41e44 1399330 games optional wesnoth-tsg_1.1.8-1ubuntu0.2_all.deb
6c89a618ac3f2702000c6cdd559dd77a 4108660 games optional wesnoth-trow_1.1.8-1ubuntu0.2_all.deb
d6b7bd427d2b2aa9ca0107a7fc2db132 301506 games optional wesnoth-ttb_1.1.8-1ubuntu0.2_all.deb
7e501982d089bc9c4a75a931ec348cff 1004966 games optional wesnoth-ei_1.1.8-1ubuntu0.2_all.deb
b28f97bdb32ec221636697eb416c5fca 4897980 games optional wesnoth-utbs_1.1.8-1ubuntu0.2_all.deb
5c9588f5c2687a554180abd0de81df46 1895358 games optional wesnoth_1.1.8-1ubuntu0.2_i386.deb
79975105e29120cef73d26f56cfdc925 288236 games optional wesnoth-server_1.1.8-1ubuntu0.2_i386.deb
07836b52f5aea5a5ae7b3b6c70af90bc 1486804 games optional wesnoth-editor_1.1.8-1ubuntu0.2_i386.deb
4e48895dd02604f7854aa6c1cccbb793 26939535 raw-translations - wesnoth_1.1.8-1ubuntu0.2_i386_translations.tar.gz
75d3dc165431c602f3330d5aeed95962 1943360 games optional wesnoth_1.1.8-1ubuntu0.2_powerpc.deb
bf480d542752ea853436d7722e31c431 298424 games optional wesnoth-server_1.1.8-1ubuntu0.2_powerpc.deb
f62b7ea2bd9ad5789d07e5aefa2ff1f2 1531162 games optional wesnoth-editor_1.1.8-1ubuntu0.2_powerpc.deb
9cbf4914e554d5072ff838640ef6d749 17774143 raw-translations - wesnoth_1.1.8-1ubuntu0.2_powerpc_translations.tar.gz
5a9bdfdac13129a60aadadbbaa4c2bf3 910 games optional wesnoth_1.1.8-1ubuntu0.2.dsc
ccf7fb43d9dd2697b18ff1d14a1854cc 37297 games optional wesnoth_1.1.8-1ubuntu0.2.diff.gz
5283a9e85b0095372c67c15833546500 2031706 games optional wesnoth_1.1.8-1ubuntu0.2_sparc.deb
cffa677e33d0142b0ccf9870421274d4 288756 games optional wesnoth-server_1.1.8-1ubuntu0.2_sparc.deb
adbd088efa858820072bb57848ef0d27 1584552 games optional wesnoth-editor_1.1.8-1ubuntu0.2_sparc.deb
2e1bfd4cc93becf6fed21918a0360bde 17773920 raw-translations - wesnoth_1.1.8-1ubuntu0.2_sparc_translations.tar.gz
More information about the edgy-changes
mailing list