Package: wesnoth-1.10 / 1:1.10.7-2+deb8u1

Metadata

Package Version Patches format
wesnoth-1.10 1:1.10.7-2+deb8u1 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
02wesnoth nolog desktop file | (download)

icons/wesnoth.desktop | 4 2 + 2 - 0 !
icons/wesnoth_editor.desktop | 4 2 + 2 - 0 !
2 files changed, 4 insertions(+), 4 deletions(-)

 call wesnoth-nolog from desktop file, too


03wesnothd name | (download)

src/game_controller.cpp | 2 1 + 1 - 0 !
src/game_preferences_display.cpp | 2 1 + 1 - 0 !
2 files changed, 2 insertions(+), 2 deletions(-)

 search for wesnothd-1.10 instead of plain wesnothd


af61f9fdd15cd439da9e2fe5fa39d174c923eaae.patch | (download)

changelog | 1 1 + 0 - 0 !
src/filesystem.cpp | 14 12 + 2 - 0 !
2 files changed, 13 insertions(+), 2 deletions(-)

 [patch] fs: use game data path to resolve ./ in the absence of a
 current_dir

Fixes a file content disclosure bug (#22042) affecting functionality
relying on the get_wml_location() function and not passing a non-empty
value for the current_dir parameter.

See <https://gna.org/bugs/?22042> for details.

This is a candidate for the 1.10 and 1.12 branches.

(Backported from master, commit 314425ab0e57b32909d324f7d4bf213d62cbd3b5.)

CVE 2015 5069 CVE 2015 5070.patch | (download)

src/filesystem.cpp | 5 5 + 0 - 0 !
1 file changed, 5 insertions(+)

 disallowed inclusion of .pbl files from wml, independent of
 extension case (CVE-2015-5069, CVE-2015-5070).