[ubuntu/jaunty] wesnoth 1:1.4.7-4 (Accepted)

[Ubuntu Installer]

wesnoth (1:1.4.7-4) unstable; urgency=high

  * Upload to fix several severe problems:
    - Compile with --disable-python because the python AI support allowed to
      break out of sandbox and allowed execution of abitrary code
      (CVE-2009-0367, Upstream Bug #13048). Don't install data/ais into
      wesnoth-data package anymore, and remove python-dev from
      Build-Dependencies.
    - Pull wesnoth-did-ai-fix patch from upstream svn r33013 to make it still
      work after above changes.
    - Pull limit-mapsize patch from upstream svn r32987 to avoid hanging of
      wesnoth/exhausting system memory (Upstream Bug #13031)
  * Pulled patch fix-server-dos from upstream svn r33069 which fixes a DoS
    pattern in the server, which came in a bit too late for the release
    (CVE-2009-0366, Upstream Bug #13037)
  * Fix typo in wesnoth-tools package description noticed by Soliton, thanks.

Date: Fri,  27 Feb 2009 19:12:11 +0000
Changed-By: Dylan A?ssi <bob.dybian at gmail.com>
Maintainer: Debian Games Team <pkg-games-devel at lists.alioth.debian.org>
Origin: Debian/unstable
https://launchpad.net/ubuntu/jaunty/+source/wesnoth/1:1.4.7-4
-------------- next part --------------
Origin: Debian/unstable
Format: 1.7
Date: Fri,  27 Feb 2009 19:12:11 +0000
Source: wesnoth
Binary: wesnoth-data, wesnoth-core, wesnoth-dbg, wesnoth, wesnoth-all, wesnoth-music, wesnoth-server, wesnoth-editor, wesnoth-tools, wesnoth-httt, wesnoth-tsg, wesnoth-trow, wesnoth-ttb, wesnoth-ei, wesnoth-utbs, wesnoth-did, wesnoth-nr, wesnoth-sof, wesnoth-sotbe, wesnoth-l, wesnoth-aoi, wesnoth-thot
Architecture: source
Version: 1:1.4.7-4
Distribution: jaunty
Urgency: high
Maintainer: Debian Games Team <pkg-games-devel at lists.alioth.debian.org>
Changed-By: Dylan A?ssi <bob.dybian at gmail.com>
Description: 
 wesnoth    - fantasy turn-based strategy game - complete suite
Changes: 
 wesnoth (1:1.4.7-4) unstable; urgency=high
 .
   * Upload to fix several severe problems:
     - Compile with --disable-python because the python AI support allowed to
       break out of sandbox and allowed execution of abitrary code
       (CVE-2009-0367, Upstream Bug #13048). Don't install data/ais into
       wesnoth-data package anymore, and remove python-dev from
       Build-Dependencies.
     - Pull wesnoth-did-ai-fix patch from upstream svn r33013 to make it still
       work after above changes.
     - Pull limit-mapsize patch from upstream svn r32987 to avoid hanging of
       wesnoth/exhausting system memory (Upstream Bug #13031)
   * Pulled patch fix-server-dos from upstream svn r33069 which fixes a DoS
     pattern in the server, which came in a bit too late for the release
     (CVE-2009-0366, Upstream Bug #13037)
   * Fix typo in wesnoth-tools package description noticed by Soliton, thanks.
Files: 
 a45e08f64cd3e7a213d9a78c6ef22933 27928 games optional wesnoth_1.4.7-4.diff.gz
 010a9bcfbdcdae88154d0ae984580934 1741 games optional wesnoth_1.4.7-4.dsc