Fedora 22 : wesnoth-1.12.4-1.fc22 (2015-10964)

Latest upstream. http://www.openwall.com/lists/oss-security/2015/06/25/2 http://www.openwall.com/lists/oss-security/2015/06/25/2 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clea...

Fedora 21 : wesnoth-1.12.4-1.fc21 (2015-10973)

Latest upstream. http://www.openwall.com/lists/oss-security/2015/06/25/2 http://www.openwall.com/lists/oss-security/2015/06/25/2 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clea...

[SECURITY] Fedora 22 Update: wesnoth-1.12.4-1.fc22

The Battle for Wesnoth is a turn-based strategy game with a fantasy theme. Build up a great army, gradually turning raw recruits into hardened veterans. In later games, recall your toughest warriors and form a deadly host against whom none can stand. Choose units from a large pool of specialists,...

[SECURITY] Fedora 21 Update: wesnoth-1.12.4-1.fc21

The Battle for Wesnoth is a turn-based strategy game with a fantasy theme. Build up a great army, gradually turning raw recruits into hardened veterans. In later games, recall your toughest warriors and form a deadly host against whom none can stand. Choose units from a large pool of specialists,...

Wesnoth Information Disclosure Vulnerability (CNVD-2015-04465)

Wesnoth is an open source wargame. An information disclosure vulnerability exists in Wesnoth, which arises from the program failing to adequately filter user-submitted input. An attacker could exploit this vulnerability to gain access to sensitive information stored in arbitrary files...

Wesnoth Information Disclosure Vulnerability (CNVD-2015-04466)

Wesnoth is an open source wargame. An information disclosure vulnerability exists in Wesnoth, which arises from the program failing to adequately filter user-submitted input. An attacker could exploit this vulnerability to gain access to sensitive information stored in arbitrary files...

Fedora Update for wesnoth FEDORA-2015-6108

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

wesnoth: information leakage

Wesnoth implements a text preprocessing language that is used in conjunction with its own game scripting language. It also has a built-in Lua interpreter and API. Both the Lua API and the preprocessor make use of the same function filesystem::getwmllocation to resolve file paths so that only...

FreeBSD : wesnoth -- disclosure of .pbl files with lowercase, uppercase, and mixed-case extension (2a8b7d21-1ecc-11e5-a4a5-002590263bf5)

Ignacio R. Morelle reports : As mentioned in the Wesnoth 1.12.4 and Wesnoth 1.13.1 release announcements, a security vulnerability targeting add-on authors was found bug 23504 which allowed a malicious user to obtain add-on server passphrases from the client's .pbl files and transmit them over th...

wesnoth -- disclosure of .pbl files with lowercase, uppercase, and mixed-case extension

Ignacio R. Morelle reports: As mentioned in the Wesnoth 1.12.4 and Wesnoth 1.13.1 release announcements, a security vulnerability targeting add-on authors was found bug 23504 which allowed a malicious user to obtain add-on server passphrases from the client's .pbl files and transmit them over the...

Battle of Wesnoth directory traversal

Directory traversal on maps loading...

[SECURITY] [DSA 3218-1] wesnoth-1.10 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3218-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 10, 2015 http://www.debian.org/security/faq -...

Fedora 21 : wesnoth-1.12.2-1.fc21 (2015-6295)

http://forums.wesnoth.org/viewtopic.php?t=41872 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora Update for wesnoth FEDORA-2015-6295

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for wesnoth FEDORA-2015-6280

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 20 : wesnoth-1.12.2-1.fc20 (2015-6280)

http://forums.wesnoth.org/viewtopic.php?t=41872 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

[SECURITY] Fedora 21 Update: wesnoth-1.12.2-1.fc21

The Battle for Wesnoth is a turn-based strategy game with a fantasy theme. Build up a great army, gradually turning raw recruits into hardened veterans. In later games, recall your toughest warriors and form a deadly host against whom none can stand. Choose units from a large pool of specialists,...

Fedora 22 : wesnoth-1.12.2-1.fc22 (2015-6108)

http://forums.wesnoth.org/viewtopic.php?t=41872 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Debian DLA-202-1 : wesnoth-1.8 security update

Ignacio R. Morelle discovered that missing path restrictions in the 'Battle of Wesnoth' game could result in the disclosure of arbitrary files in the user's home directory if malicious campaigns/maps are loaded. For the oldstable distribution distribution, this problem has been fixed in version...

FreeBSD : Wesnoth -- Remote information disclosure (ba326a36-5f02-452d-a215-31e7b06d5edf)

US-CERT/NIST reports : The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote attackers to read arbitrary files via a crafted 1 campaign or 2 map file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...