wesnoth-1.8 -- LTS security update

2015-04-17T00:00:00
ID DLA-202
Type debian
Reporter Debian
Modified 2015-04-17T00:00:00

Description

Ignacio R. Morelle discovered that missing path restrictions in the Battle of Wesnoth game could result in the disclosure of arbitrary files in the user's home directory if malicious campaigns/maps are loaded.

For the oldstable distribution (squeeze), this problem has been fixed in version 1:1.8.5-1+deb6u1. See DSA-3218-1 for the versions of the other releases.