wesnoth (1.1+reverted+to+1.0.2-0ubuntu1.2) dapper-security; urgency=low * SECURITY UPDATE: wesnoth has several vulnerabilities: + CVE-2007-3917: The multiplayer engine in Wesnoth 1.2.x before 1.2.7 and 1.3.x before 1.3.9 allows remote servers to cause a denial of service (crash) via a long message with multibyte characters that can produce an invalid UTF-8 string after it is truncated, which triggers an uncaught exception, involving the truncate_message function in server/server.cpp. NOTE: this issue affects both clients and servers. + CVE-2007-5742: Directory traversal vulnerability in the WML engine preprocessor for Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows remote attackers to read arbitrary files via ".." sequences in unknown vectors. + CVE-2007-6201: Unspecified vulnerability in Wesnoth before 1.2.8 allows attackers to cause a denial of service (hang) via a "faulty add-on" and possibly execute other commands via unknown vectors related to the turn_cmd option * src/display.cpp, src/map_label.cpp, src/server/server.cpp (2007-3917) + Applied patch by upstream + Link 1: http://svn.gna.org/viewcvs/wesnoth/branches/1.2/src/server/server.cpp?rev=20809&r1=20174&r2=20809 + Link 2: http://svn.gna.org/viewcvs/wesnoth/branches/1.2/src/map_label.cpp?r2=20802&rev=20802&r1=13482&dir_pagestart=50 + Link 3: http://svn.gna.org/viewcvs/wesnoth/branches/1.2/src/display.cpp?rev=20786&r1=16280&r2=20786 * src/serialization/preprocessor.cpp (2007-5742): + Applied patch by upstream + Link: http://svn.gna.org/viewcvs/wesnoth/branches/1.2/src/serialization/preprocessor.cpp?rev=21904&r1=12381&r2=21904 * src/playturn.cpp, src/preferences.cpp (2007-6201): + Applied patch by upstream + Link 1: http://svn.gna.org/viewcvs/wesnoth/branches/1.2/src/preferences.cpp?r2=21907&rev=21907&r1=18008&dir_pagestart=100 * References: CVE-2007-3917 CVE-2007-5742 CVE-2007-6201 -- Stephan Hermann Wed, 05 Dec 2007 10:06:37 +0100 wesnoth (1.1+reverted+to+1.0.2-0ubuntu1) dapper; urgency=low * Revert to 1.0.2 to use stable upstream releases instead of development releases. * Add the patch from 1.0.2-1ubuntu1: Install scenario-test.cfg to package wesnoth-data so that option -t works. (Ubuntu #1213) -- Ming Hua Sat, 25 Mar 2006 20:55:28 -0600 wesnoth (1.1-1ubuntu3) dapper; urgency=low * debian/wesnoth-data.install: + Replaced all .cfg entries with a single *.cfg entry This will fix all .cfg issues for every time now (Taken from debian 1.1-2) * debian/control: + added libfribidi-dev to build-deps * debian/rules: + added --with-fribidi to configure -- Stephan Hermann Sat, 7 Jan 2006 04:56:55 +0100 wesnoth (1.1-1ubuntu2) dapper; urgency=low * Applied amd64 fix to src/ai_python.cpp -- Stephan Hermann Fri, 6 Jan 2006 04:02:54 +0100 wesnoth (1.1-1ubuntu1) dapper; urgency=low * Resynchronise with Debian. - Restore scenario-test.cfg in debian/wesnoth-data.install so that -t switch will work. (Closes: Malone #1213 ; see Debian bug #337834) -- Raphaël Pinson Fri, 06 Jan 2006 00:40:47 +0100 wesnoth (1.1-1) unstable; urgency=low * New upstream release * Add python-dev to Build-Depends to enable Python API -- Isaac Clerencia Mon, 2 Jan 2006 18:38:45 +0100 wesnoth (1.0.2-1ubuntu1) dapper; urgency=low * Resynchronise with Debian: - Restore scenario-test.cfg for -t switch. -- Daniel T Chen Thu, 08 Dec 2005 20:00:17 +0000 wesnoth (1.0.2-1) unstable; urgency=low * New upstream release -- Isaac Clerencia Sun, 20 Nov 2005 14:11:03 +0100 wesnoth (1.0.1-1ubuntu2) dapper; urgency=low * Reupload due to odd checksum errors. -- Daniel T Chen Sat, 12 Nov 2005 20:51:48 -0800 wesnoth (1.0.1-1ubuntu1) dapper; urgency=low * Add scenario-test.cfg to package so that -t option will work (Closes: Malone #1213) -- Benjamin Montgomery Sun, 6 Nov 2005 12:12:01 -0600 wesnoth (1.0.1-1) unstable; urgency=low * New upstream release * Disable libzipios++ support, fixes the "user campaigns appear twice" bug, closes: #329378 -- Isaac Clerencia Wed, 19 Oct 2005 22:29:57 +0200 wesnoth (1.0-1) unstable; urgency=low * New upstream release (1.0) -- Isaac Clerencia Sun, 2 Oct 2005 14:09:27 +0200 wesnoth (0.99+1.0rc1-1) unstable; urgency=low * New upstream release. Please note that: * 1.0 versions have stripped uncomplete translations, they will be restored in the 1.1 series * The Dark Hordes campaign has been removed from the official tarball, but it can still be found on the campaign server * Suggest: ttf-sazanami-gothic, as it's required to play in Japanese * Remove Suggests: ttf-arphic-gkai00mp, as Chinese translation has been dropped upstream temporarily (see above) * Drop the wesnoth-tdh package, as it's no longer supplied upstream (see above) -- Isaac Clerencia Tue, 20 Sep 2005 00:23:24 +0200 wesnoth (0.9.7-1) unstable; urgency=low * New upstream release -- Isaac Clerencia Thu, 8 Sep 2005 09:42:08 +0200 wesnoth (0.9.6-1) unstable; urgency=low * New upstream release * Switched packaging to CDBS * Replace the old link for ttf-bitstream-vera with one to ttf-dejavu in wesnoth-data.links * Fix icon not being included in the package -- Isaac Clerencia Sun, 14 Aug 2005 12:21:07 +0200 wesnoth (0.9.5-1) unstable; urgency=low * New upstream release * Update to policy 3.6.2, no changes required * Adapt wesnoth-server init-script to LSB and depend on lsb-base * Depend on ttf-dejavu font instead of ttf-bitstream-vera * Don't force users to have a campaign installed, closes: #312568 -- Isaac Clerencia Tue, 9 Aug 2005 10:59:47 +0200 wesnoth (0.9.4-1) unstable; urgency=low * New upstream release -- Isaac Clerencia Sat, 23 Jul 2005 13:04:46 +0200 wesnoth (0.9.3-1) unstable; urgency=low * New upstream release -- Isaac Clerencia Wed, 29 Jun 2005 23:01:04 +0200 wesnoth (0.9.2-1) unstable; urgency=low * New upstream release, closes: #303799: wesnoth may lock when connecting to server closes: #306932: glitches in the french translation * Added replaces to campaigns packages, closes: #308358 -- Isaac Clerencia Mon, 6 Jun 2005 00:14:37 +0200 wesnoth (0.9.1-1) unstable; urgency=low * New upstream release, closes: #303796, no help for silver mage closes: #297500, resizing wesnoth doesn't work well * Moved campaign translations to the right package * Make campaigns provide wesnoth-campaign- -- Isaac Clerencia Mon, 25 Apr 2005 10:42:12 +0200 wesnoth (0.9.0-4) unstable; urgency=low * Add a patch for an important upstream bug involving the Dark Adept unit and other units * Add dpatch as build-depends -- Isaac Clerencia Tue, 12 Apr 2005 08:17:54 +0200 wesnoth (0.9.0-3) unstable; urgency=low * Fix wesnoth-editor, wesnoth-data lacked wesnoth-editor.zip after switching to zipios -- Isaac Clerencia Mon, 11 Apr 2005 22:30:08 +0200 wesnoth (0.9.0-2) unstable; urgency=low * Re-add translations to the packages, they were forgotten when moving from dh_movefiles to dh_install -- Isaac Clerencia Mon, 11 Apr 2005 19:53:27 +0200 wesnoth (0.9.0-1) unstable; urgency=low * New upstream release: closes: #303801: wesnoth: in-game help GUI isn't very responsive * Enable zipios support again * Use dh_install instead of dh_movefiles * Split campaigns in different packages -- Isaac Clerencia Sun, 10 Apr 2005 15:21:57 +0200 wesnoth (0.8.11-1) unstable; urgency=low * New upstream release -- Isaac Clerencia Sun, 20 Feb 2005 11:30:20 +0100 wesnoth (0.8.10-1) unstable; urgency=low * New upstream release * Removed zipios support (it's still buggy) -- Isaac Clerencia Sun, 6 Feb 2005 17:00:30 +0100 wesnoth (0.8.9-1) unstable; urgency=low * New upstream release * Add zipios and zip Build-Depends * Add README.Debian about wesnoth.debian.net -- Isaac Clerencia Wed, 26 Jan 2005 10:08:20 +0100 wesnoth (0.8.8-1) unstable; urgency=low * New upstream release, closes: #287058 * Improved init.d DESCription * Moved /usr/games/wmlxgettext to /usr/bin/wesnothml-xgettext * Added man page for wesnoth-nolog (link to wesnoth man page) -- Isaac Clerencia Sun, 5 Dec 2004 13:06:03 +0100 wesnoth (0.8.7-1) unstable; urgency=low * New upstream release * Changed Depend: on libsdl-ttf2.0-0 to libfreetype6 as now Wesnoth provides a patched libsdl-ttf2 version in the tarball -- Isaac Clerencia Mon, 1 Nov 2004 15:10:23 +0100 wesnoth (0.8.5-1) unstable; urgency=high * New upstream release. * Added a wesnoth-nolog commands that just calls wesnoth with output and error redirected to /dev/null, this is now the command called from the menu, closes: #274802. * Changed official server to wesnoth.debian.net. It will become the Sarge server, running the Sarge version. Priority high because this is the version targeted for Sarge (cross your fingers, please). -- Isaac Clerencia Tue, 5 Oct 2004 21:51:12 +0200 wesnoth (0.8.4-1) unstable; urgency=low * New upstream release * Modified call to configure in debian/rules to follow some new parameters in upstream configure * Added a line in clean target to remove .mo files created during configure * Use DESTDIR to make sure that it doesn't touch anything in the root filesystem when the package is built, closes: #271356 -- Isaac Clerencia Sat, 11 Sep 2004 21:28:26 +0200 wesnoth (0.8.3-1) unstable; urgency=low * New upstream release, closes: #269078 * Modified debian/rules to add po files to wesnoth-data, as Wesnoth has switched from ITS (Incompatible Translation System) to gettext -- Isaac Clerencia Fri, 27 Aug 2004 20:11:06 +0200 wesnoth (0.8.2-1) unstable; urgency=low * New upstream release, including fixes for several DoS vulnerabilities in wesnothd -- Isaac Clerencia Sun, 15 Aug 2004 22:36:28 +0200 wesnoth (0.8.1-2) unstable; urgency=low * Fix FTBFS bug caused by an autoconf test which relied on SDL_mixer private symbols (stripped in last SDL_mixer upload) -- Isaac Clerencia Fri, 6 Aug 2004 13:05:41 +0200 wesnoth (0.8.1-1) unstable; urgency=low * New upstream release * Upstream unit selection bug fixed, closes: #234998 * Patched with a CVS code snippet to fix a "packet of death" bug in wesnothd -- Isaac Clerencia Tue, 3 Aug 2004 12:51:16 +0200 wesnoth (0.8-1) unstable; urgency=low * New upstream release -- Isaac Clerencia Fri, 2 Jul 2004 15:43:29 +0200 wesnoth (0.7.11-1) unstable; urgency=low * New upstream release -- Isaac Clerencia Mon, 28 Jun 2004 20:59:04 +0200 wesnoth (0.7.10-1) unstable; urgency=low * New upstream release, closes: #254237 -- Isaac Clerencia Mon, 21 Jun 2004 02:23:15 +0200 wesnoth (0.7.9-1) unstable; urgency=low * New upstream release -- Isaac Clerencia Sat, 12 Jun 2004 00:51:26 +0200 wesnoth (0.7.8-1) unstable; urgency=low * New upstream release * Removed --enable-gnome and copied the .desktop file by hand -- Isaac Clerencia Fri, 28 May 2004 01:13:00 +0200 wesnoth (0.7.7-1) unstable; urgency=low * New upstream release -- Isaac Clerencia Thu, 20 May 2004 01:08:16 +0200 wesnoth (0.7.6-2) unstable; urgency=low * Fixed FTBFS bug in alpha, ia64 and s390 -- Isaac Clerencia Tue, 11 May 2004 23:29:51 +0200 wesnoth (0.7.6-1) unstable; urgency=low * New upstream release -- Isaac Clerencia Tue, 4 May 2004 10:32:47 +0200 wesnoth (0.7.5-1) unstable; urgency=low * New upstream release * Upstream packed without --posix, closes: #245079 -- Isaac Clerencia Sat, 24 Apr 2004 22:28:53 +0200 wesnoth (0.7.3-2) unstable; urgency=low * Changed some descriptions * wesnoth-data split into wesnoth-data and wesnoth-music -- Isaac Clerencia Sat, 24 Apr 2004 20:28:38 +0200 wesnoth (0.7.3-1) unstable; urgency=low * New upstream release -- Isaac Clerencia Sun, 18 Apr 2004 15:45:57 +0200 wesnoth (0.7.2-1) unstable; urgency=low * New upstream release -- Isaac Clerencia Thu, 8 Apr 2004 21:31:52 +0200 wesnoth (0.7.1-2) unstable; urgency=low * Changed short and long descriptions * Use dh_install and dh_movefiles instead of directly copying/moving files from rules * Added support for noopt and nostrip for DEB_BUILD_OPTIONS * Removed clean from "make clean distclean" in rules clean target because distclean already calls clean target in Makefile * Added support for cross compilation * Wrapped some lines in debian/rules to 80 chars * Changed several MANUAL entries in wesnoth.docs to MANUAL* -- Isaac Clerencia Mon, 5 Apr 2004 20:19:27 +0200 wesnoth (0.7.1-1) unstable; urgency=low * New upstream release * Added --enable-gnome in configuration to install .desktop files correctly * Changed Priority from extra to optional, closes: #239155 * Now wesnoth-data is built in binary-indep, closes: #241063 -- Isaac Clerencia Sun, 4 Apr 2004 00:49:52 +0200 wesnoth (0.7-1) unstable; urgency=low * New upstream release * Switched Maintainer and Co-maintainer roles * Added .desktop file -- Isaac Clerencia Fri, 19 Mar 2004 21:39:52 +0100 wesnoth (0.6.99.5-1) unstable; urgency=low * New upstream release Units no longer get healed when saving, closes: #234974 * Moved data from /usr/share/games/wesnoth-data to /usr/share/games/wesnoth * Added lintian override for menu icon in wesnoth-data for wesnoth package -- Isaac Clerencia Mon, 15 Mar 2004 21:16:24 +0100 wesnoth (0.6.99.4-1) unstable; urgency=low * New upstream release * Added menu icon to wesnoth-data, closes: #232913 * Updated Standards-Version to 3.6.1 -- Isaac Clerencia Sat, 21 Feb 2004 21:08:18 +0100 wesnoth (0.6.99.3-3) unstable; urgency=low * Added Isaac Clerencia in the Uploaders field in debian/control * Added menu entry for wesnoth-editor on Ben Armstrong (SynrG) advice. -- Cyril Bouthors Wed, 18 Feb 2004 21:56:37 +0100 wesnoth (0.6.99.3-2) unstable; urgency=low * Moved Vera.ttf symlink from wesnoth to wesnoth-data; bug reported from Gerfried Fuchs (Rhonda). -- Cyril Bouthors Sat, 14 Feb 2004 12:14:17 +0100 wesnoth (0.6.99.3-1) unstable; urgency=low * New upstream release (closes: #232571). -- Cyril Bouthors Fri, 13 Feb 2004 21:46:11 +0100 wesnoth (0.6.99.2-3) unstable; urgency=low * wesnoth-editor: typo (closes: #226769). * wesnoth: fixed lintian error. -- Cyril Bouthors Thu, 12 Feb 2004 00:58:55 +0100 wesnoth (0.6.99.2-2) unstable; urgency=low * wesnoth-data: replaced Vera.ttf by a symlink. Added dependency to ttf-bitstream-vera (closes: #231757). -- Cyril Bouthors Sun, 8 Feb 2004 21:15:17 +0100 wesnoth (0.6.99.2-1) unstable; urgency=low * New upstream release (closes: #230547). -- Cyril Bouthors Thu, 5 Feb 2004 12:07:21 +0100 wesnoth (0.6.99.1-1) unstable; urgency=low * New upstream release (closes: #224460). -- Cyril Bouthors Thu, 29 Jan 2004 02:24:00 +0100 wesnoth (0.6.1-3) unstable; urgency=low * Added wesnoth_editor (closes: #224810). -- Cyril Bouthors Thu, 25 Dec 2003 16:41:16 +0100 wesnoth (0.6.1-2) unstable; urgency=low * wesnoth-data: moved files from /usr/share/wesnoth-data to /usr/share/games/wesnoth-data (closes: #224289). -- Cyril Bouthors Wed, 17 Dec 2003 18:43:18 +0100 wesnoth (0.6.1-1) unstable; urgency=low * New upstream release -- Cyril Bouthors Tue, 16 Dec 2003 14:49:13 +0100 wesnoth (0.6-2) unstable; urgency=low * The red wine release. -- Cyril Bouthors Sat, 13 Dec 2003 00:02:10 +0100 wesnoth (0.6-1) unstable; urgency=low * New upstream release * Run wesnothd as nobody -- Cyril Bouthors Fri, 12 Dec 2003 14:24:51 +0100 wesnoth (0.5.1-3) unstable; urgency=low * Fixed dependency (closes: #220862, #217508, #217526). -- Cyril Bouthors Sat, 29 Nov 2003 03:43:42 +0100 wesnoth (0.5.1-2) unstable; urgency=low * Added dependency to wesnoth-data with explicit version number. * Better description thanks to Benjamin Drieur, our cosmetic assistant ;-) -- Cyril Bouthors Fri, 14 Nov 2003 03:31:48 +0100 wesnoth (0.5.1-1) unstable; urgency=low * New upstream release -- Cyril Bouthors Mon, 10 Nov 2003 02:20:16 +0100 wesnoth (0.5-2) unstable; urgency=low * Fixed init.d for wesnoth-server -- Cyril Bouthors Mon, 10 Nov 2003 02:03:37 +0100 wesnoth (0.5-1) unstable; urgency=low * New upstream release (closes: #217561). -- Cyril Bouthors Mon, 3 Nov 2003 13:25:49 +0100 wesnoth (0.4.8-3) unstable; urgency=low * Added Debian menu entry so it appears in everybody's window managers under the Games menu (closes: #217606). -- Cyril Bouthors Sun, 26 Oct 2003 11:27:11 +0100 wesnoth (0.4.8-2) unstable; urgency=low * Added dependency to wesnoth-data (closes: #217212). * Removed README (closes: #217213). -- Cyril Bouthors Sat, 25 Oct 2003 16:14:21 +0200 wesnoth (0.4.8-1) unstable; urgency=low * Initial Release. -- Cyril Bouthors Tue, 14 Oct 2003 14:10:24 +0200