[Bug 821262] [NEW] Sync ioquake3 1.36+svn1946-5 (universe) from Debian unstable (main)

Launchpad Bug Tracker 821262 at bugs.launchpad.net
Fri Aug 5 04:13:01 UTC 2011


You have been subscribed to a public bug by Micah Gersten (micahg):

Please sync ioquake3 1.36+svn1946-5 (universe) from Debian unstable
(main)

Changelog entries since current oneiric version 1.36+svn1946-3:

ioquake3 (1.36+svn1946-5) unstable; urgency=low

  * Amend previous changelog to include bug numbers, which were not available
    when the package was prepared before the embargo date
  * Restore the ability to load replacement shared objects from a
    subdirectory, fixing symptoms like #620757 on OpenArena pure servers

 -- Simon McVittie <smcv at debian.org>  Thu, 04 Aug 2011 09:03:51 +0100

ioquake3 (1.36+svn1946-4) unstable; urgency=high

  * Apply upstream r2092 to fix failover between xmessage, zenity and kdialog
    if the preferred implementation is missing, so that r2097 can be applied
  * Apply upstream r2097 to fix arbitrary code execution by a malicious
    server. CVE-2011-1412 (Closes: #635731)
  * Apply upstream r2098 to fix arbitrary code execution by malicious QVM
    bytecode (mitigation: only if native code is enabled), which could be
    auto-downloaded from a malicious server if enabled. CVE-2011-2764
    (Closes: #635734)

 -- Simon McVittie <smcv at debian.org>  Tue, 26 Jul 2011 21:09:53 +0100

** Affects: ioquake3 (Ubuntu)
     Importance: Wishlist
         Status: Confirmed

-- 
Sync ioquake3 1.36+svn1946-5 (universe) from Debian unstable (main)
https://bugs.launchpad.net/bugs/821262
You received this bug notification because you are a member of Ubuntu Package Archive Administrators, which is subscribed to the bug report.



More information about the ubuntu-archive mailing list