Your message dated Sun, 23 Nov 2014 16:04:19 +0000 with message-id <e1xsze7-00023o...@franck.debian.org> and subject line Bug#770514: fixed in teeworlds 0.6.2+dfsg-2 has caused the Debian Bug report #770514, regarding teeworlds: security vulnerability (Memory reads, Segmentation Fault) to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 770514: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770514 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: src:teeworlds Version: 0.6.1+dfsg-1 Severity: grave Tags: security Hi, yesterday the developers of Teeworld announced a security vulnerability in Teeworld's server for the complete 0.6.x series. That means stable is also affected. https://www.teeworlds.com/?page=news&id=11200 I am raising the severity to grave since the post states that the vulnerability includes "Memory reads, Segmentation Fault". They released a bugfix release, 0.6.3 with the following bugfixes * Fix the above-mentioned security vulnerability (Memory reads, Segmentation Fault) in all 0.6.x servers. * Fix server crash in the console code. * Fix master server lookup for servers. * Fix scripts/make_release.py script. * Fix client crash when opening a map with an invalid version. Regards, Markus
--- End Message ---
--- Begin Message ---Source: teeworlds Source-Version: 0.6.2+dfsg-2 We believe that the bug you reported is fixed in the latest version of teeworlds, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 770...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Felix Geyer <fge...@debian.org> (supplier of updated teeworlds package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 23 Nov 2014 16:45:28 +0100 Source: teeworlds Binary: teeworlds teeworlds-server teeworlds-data Architecture: source all Version: 0.6.2+dfsg-2 Distribution: unstable Urgency: high Maintainer: Debian Games Team <pkg-games-de...@lists.alioth.debian.org> Changed-By: Felix Geyer <fge...@debian.org> Description: teeworlds - online multi-player platform 2D shooter teeworlds-data - data for Teeworlds; an online multi-player platform 2D shooter teeworlds-server - server for Teeworlds; an online multi-player platform 2D shooter Closes: 770514 Changes: teeworlds (0.6.2+dfsg-2) unstable; urgency=high . * Fix a server crash that is remotely exploitable. (Closes: #770514) - Add fixed_a_server_crash.patch, cherry picked from 0.6.3. Checksums-Sha1: 47d357bb977fb78363c7340335198aa6f7e138f7 2262 teeworlds_0.6.2+dfsg-2.dsc f71ab482d165a89d8dfe452089663e8374a46e73 8248 teeworlds_0.6.2+dfsg-2.debian.tar.xz cd237b46b65754938b6c5844e221e24566914ed1 6413136 teeworlds-data_0.6.2+dfsg-2_all.deb Checksums-Sha256: c937cc2f7d49431d827982a41d7d18714b6dc2e421c7506e38561c6035a76338 2262 teeworlds_0.6.2+dfsg-2.dsc f6be936158d61bfcfad1392d1332d4240db9498a1efc0899f4d9bcde55c2bc80 8248 teeworlds_0.6.2+dfsg-2.debian.tar.xz 7703fcf1e84c588d36cec69994db5d3f09899680feb639119076bf1577f9aff5 6413136 teeworlds-data_0.6.2+dfsg-2_all.deb Files: 7b057c93f166aca10d8b43b414d6e419 2262 games optional teeworlds_0.6.2+dfsg-2.dsc 210546fc0ea4f7029e3fa4e1d1f00028 8248 games optional teeworlds_0.6.2+dfsg-2.debian.tar.xz fccbe58e69d72be020d9bcd4695e0b45 6413136 games optional teeworlds-data_0.6.2+dfsg-2_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJUcgJ6AAoJEP4ixv2DE11FPXQP/2PxowJwj4XuHbiw946k9X25 Yvylr+552ZEGyZBrAn7aOqr7XkZB3RvSyaNYNr2v0fGkAaWUnjmzkgUxD1uriFuC LsDgztmKQPGm/ix6uWFRgb+m8nVAENyxRplogPdRRWaOVEBSOnL93jJhbXgYYTeP 2oLpGxpN4rdspwblnSXejFs9eILJnJjOHNvZ/So/4BES6GKhfU6mvdsSCz9nURMX 0BFCNpGBX3zkuBfXafjDIFBRMaBAMt1AgbSk2qNC/FjMzEnkWkcEWiatahNsrO20 9wHivB9HiE4TVvrFAShOG/iDAN0ll9PJwRm0uFT6nMNCDj6glHBCWsnRArLH9P45 guOvaQsIV8JhSWuS3GK6JIBNyE8Nc94qhF3s7EcpobK/AImkKhq/br5upOaXRpol 2QC7Tiho+Rvp21yWZ7abh78yDsrCT5DV8yAzZEBA9k8y5MyDWSFJiwHvNVrD83f8 /JmEF9WDQxvmEUiqIcohYblDfQakWyHHLSkDGDFWxoi5SF+bL9pGAGLkzcKzNGR7 J36EdmAHX86VwKnP+rQovQSHfY4DAgmuwteFsxJT2/xLZL0/iUiuxAJm5qbGlJPY 35kvTmrzJPoBxFd9QkpoZz82WtZL8GUnmjRyfihLQmRYSEbC2NkKy7G0u9MXUDLa wqecUI1HGAF9fET2BBR2 =hWPP -----END PGP SIGNATURE-----
--- End Message ---
