[Pkg-games-ubuntu] [Bug 1486946] Re: Server security vulnerability

[pcworld]

trusty and utopic are currently on 0.6.2+dfsg-1, whereas vivid and wily are on 0.6.2+dfsg-2. The only change from 0.6.2+dfsg-1 to 0.6.2+dfsg-2 is the security fix. So you just need to merge the respective debdiff into trusty and utopic.
For precise it is not that easy, since it is on 0.6.1+dfsg-1.

-- 
You received this bug notification because you are a member of
Debian/Ubuntu Games Team, which is subscribed to teeworlds in Ubuntu.
https://bugs.launchpad.net/bugs/1486946

Title:
  Server security vulnerability

Status in teeworlds package in Ubuntu:
  Incomplete
Status in teeworlds package in Debian:
  Fix Released

Bug description:
  Teeworlds 0.6.3 released a security fix for an exploitable server bug ("Memory reads, Segmentation Fault"): https://www.teeworlds.com/?page=news&id=11200
  Debian has already backported the fix to 0.6.2: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770514
  This fix (affecting teeworlds-server) is already included in vivid and wily, but should be backported to older but still supported Ubuntu releases.

  Teeworlds 0.6.3 also fixed a bug in the client, which seems not to
  have been included in the current Debian release: "Fix client crash
  when opening a map with an invalid version"

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/teeworlds/+bug/1486946/+subscriptions