Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Debian 1.10 DSA-3218-1 Moderate: Wesnoth File Disclosure Risk

debian
Calendar Grey April 10, 2015
Debian Logo
Safeguard your platform from vulnerabilities linked to inadequate path limitations in Wesnoth. Immediate action needed.
Ignacio R

Summary

Ignacio R. Morelle discovered that missing path restrictions in the
"Battle of Wesnoth" game could result in the disclosure of arbitrary
files in the user's home directory if malicious campaigns/maps are
loaded.

For the stable distribution (wheezy), this problem has been fixed in
version 1.10.3-3+deb7u1.

For the unstable distribution (sid), this problem has been fixed in
version 1:1.10.7-2 and in version 1:1.12.1-1 of the wesnoth-1.12
source package.

We recommend that you upgrade your wesnoth-1.10 packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Package: wesnoth-1.10
CVE ID: CVE-2015-0844

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here