[Secure-testing-team] Bug#617960: widelands: potential security issue in internet games

Ansgar Burchardt ansgar at 2008.43-1.org
Sat Mar 12 21:23:42 UTC 2011


Package: widelands
Version: 1:15-2
Severity: grave
Tags: security upstream
Justification: user security hole

Hi,

there is a fix[1] for a potential security issue in internet games
available upstream.  It looks like this might allow overwriting
arbitrary files as the user, but I have not done any verification.

Regards,
Ansgar

[1] <http://bazaar.launchpad.net/~widelands-dev/widelands/build-15/revision/5021>





More information about the Secure-testing-team mailing list