[SECURITY] [DSA 1737-1] New wesnoth packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1737-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 11, 2009 http://www.debian.org/security/faq -...

CVE-2009-0367

The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute arbitrary code by using a whitelisted module that imports an unsafe module, then using a hierarchical module name to access the unsafe module through the whitelisted module...

CVE-2009-0367

The CVE-2009-0367 vulnerability affects Wesnoth’s Python AI module (Wesnoth 1.4.x and 1.5 before 1.5.11). A remote attacker can escape the sandbox and run arbitrary Python code by using a whitelisted module that imports an unsafe module, then accessing it via a hierarchical module name through th...