Your message dated Wed, 23 Mar 2011 23:06:25 +0000
with message-id <e1q2x8d-0007yl...@franck.debian.org>
and subject line Bug#617960: fixed in widelands 1:15-3
has caused the Debian Bug report #617960,
regarding widelands: potential security issue in internet games
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
617960: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=617960
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: widelands
Version: 1:15-2
Severity: grave
Tags: security upstream
Justification: user security hole
Hi,
there is a fix[1] for a potential security issue in internet games
available upstream. It looks like this might allow overwriting
arbitrary files as the user, but I have not done any verification.
Regards,
Ansgar
[1]
<http://bazaar.launchpad.net/~widelands-dev/widelands/build-15/revision/5021>
--- End Message ---
--- Begin Message ---
Source: widelands
Source-Version: 1:15-3
We believe that the bug you reported is fixed in the latest version of
widelands, which is due to be installed in the Debian FTP archive:
widelands-data_15-3_all.deb
to main/w/widelands/widelands-data_15-3_all.deb
widelands-dbg_15-3_amd64.deb
to main/w/widelands/widelands-dbg_15-3_amd64.deb
widelands_15-3.debian.tar.gz
to main/w/widelands/widelands_15-3.debian.tar.gz
widelands_15-3.dsc
to main/w/widelands/widelands_15-3.dsc
widelands_15-3_amd64.deb
to main/w/widelands/widelands_15-3_amd64.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 617...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Enrico Tassi <gareuselesi...@debian.org> (supplier of updated widelands package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Wed, 23 Mar 2011 09:47:28 +0100
Source: widelands
Binary: widelands widelands-data widelands-dbg
Architecture: source amd64 all
Version: 1:15-3
Distribution: unstable
Urgency: high
Maintainer: Martin Quinson <mquin...@debian.org>
Changed-By: Enrico Tassi <gareuselesi...@debian.org>
Description:
widelands - fantasy real-time strategy game
widelands-data - fantasy real-time strategy game (data files)
widelands-dbg - fantasy real-time strategy game (debug cruft)
Closes: 617960
Changes:
widelands (1:15-3) unstable; urgency=high
.
* Closes a potential security issue in internet games.
Added: patches/secfix-617960 (Closes: #617960)
Checksums-Sha1:
16e5b194a5e038ecdb3d8a09cf3e14c08ca8fb25 1548 widelands_15-3.dsc
93c5935fdbf930c18c6b01a05394651b45cc4b64 14331 widelands_15-3.debian.tar.gz
408e46308480177b8209ab1f6476b673bb5c6171 1807570 widelands_15-3_amd64.deb
6fa21bf94558a487e1e6afd017aef8fdea7c1c98 108770694 widelands-data_15-3_all.deb
54e225fe4859422a8d257d462ee0b2cec0ad566d 21008716 widelands-dbg_15-3_amd64.deb
Checksums-Sha256:
8210eba2cf082ebb2f9497e3cdfa706f4651038075818c3ea3b8cdb3c0fb7c36 1548
widelands_15-3.dsc
b78d4cc661660295753d89e92bebaee977c791ff47e7784f1edee81e79eabe20 14331
widelands_15-3.debian.tar.gz
80cc3e4d2fdd63c28670b3e2ca2e7fee62443a7c13dc410e6f98176f56fbdee1 1807570
widelands_15-3_amd64.deb
6e85cee76251847d05d67743841e222d301ad2c90639cee2ad15b0ddd5807c1a 108770694
widelands-data_15-3_all.deb
2c0cdcfa8da52a22cd211e21fa2342a05042d4b9d067764a5473705cda89d1f6 21008716
widelands-dbg_15-3_amd64.deb
Files:
6cccb3993b769cd48d2b5a3e9bb5d260 1548 games extra widelands_15-3.dsc
41c8e1599ffdb7f83ceca4d4d0a441b5 14331 games extra widelands_15-3.debian.tar.gz
f592d45b1ad26472289332f6125f6df0 1807570 games extra widelands_15-3_amd64.deb
615ed35bcf56123ce90f2c1b75817a83 108770694 games extra
widelands-data_15-3_all.deb
eb2006da70a3bcdf93a7be3e2f425f41 21008716 debug extra
widelands-dbg_15-3_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iEYEARECAAYFAk2J3L4ACgkQ7kkcPgEj8vIp7QCcDflLkKhcA/6aGuHA1bDOotbn
u0sAoKr/1baiISmLfbd2B2kisFpI3EG+
=78er
-----END PGP SIGNATURE-----
--- End Message ---
