-
wesnoth (1:1.2.8-1~feisty1) feisty-backports; urgency=low
* Automated backport upload; no source changes.
wesnoth (1:1.2.8-1) unstable; urgency=medium
* New upstream release with a fix for a directory traversal problem in the
WML engine which could lead to sending arbitrary files [CVE-2007-5742].
* Server now supports reloading of config on SIGHUP, adding support for that
to the init.d script.
* Fixed a grammar issue in the package descriptions, closes: #446545
* (Re)work the dependency handling with respect to campaigns and
incompatibility in between different wesnoth versions: make the campaigns
depend on wesnoth with same Upstream-Version. This change was both
inspired by #447151 and Andreas Tille, thanks.
* Add wesnoth-all meta package which depends on all but the server packages
produced, closes: #449132
* Removed cruft package relationship handling from before the etch release.
* Removed cdbs dependency for easier maintenanceability of debian/rules, use
quilt as patch management.
* Removed XS- prefix from Vcs control fields.
* Bumped debhelper to compat 5.
* Add explicit Build-Depends on libsdl1.2-dev instead of depending on the
implicit pullin through the other libsdl Build-Dependencies.
* Added patches:
- fix-manpage: fix the wesnoth_editor manpage NAME syntax
- fix-desktop-files: remove obsoleted entries from .desktop files
wesnoth (1:1.2.7-2) unstable; urgency=low
* Epoch this version, there was a fumble with an development release upload
to unstable, closes: #446505
wesnoth (1.2.7-1) unstable; urgency=high
* New upstream release which fixes an insecure truncate of a multibyte chat
message that can lead to invalid utf-8 and throw an uncaught exception.
Both wesnoth client and server are affected [CVE-2007-3917].
wesnoth (1.2.6-2) unstable; urgency=low
* Removed debian/*.dirs, isn't needed and just makes the debian directory
less clearly.
* Fixed the menu xpm files--somehow they were displayed b0rked while the
content was proper xpm, closes: #435874
* Added XS-Vcs-{Svn,Browser} lines to control file.
* Added Homepage: to control file, removed it from Package descriptions,
closes: #439574
* Added LSB section to init.d script of wesnothd.
* Updated copyright informations.
wesnoth (1.2.6-1) unstable; urgency=low
* New upstream release
* Added binNMU patch from Lior Kaplan, closes: #432974
* Removed debian/patches/gcc-4.3-fix.patch again, got incorporated upstream.
* Install the wesnoth_editor desktop file, closes: #423439
* Moved wesnoth-editor in the menu to Games/Tools.
* Generated wesnoth_editor-icon.xpm for the menu entry and reduced
wesnoth-icon.xpm to 32x32 as per menu policy recommended.
-- SpecialK <email address hidden> Tue, 18 Dec 2007 17:07:18 +0000
-
wesnoth (1.2.5-1ubuntu1~feisty1) feisty-backports; urgency=low
* Automated backport upload; no source changes.
wesnoth (1.2.5-1ubuntu1) gutsy; urgency=low
* Merge from debian unstable, remaining changes:
- Changed maintainer to MOTU
- Created wesnoth-all metapackage.
- Added libsdl1.2-dev to Build-deps.
wesnoth (1.2.5-1) unstable; urgency=low
* New upstream release
* Add myself to Co-Maintainers. :)
* Added watch file.
* Updated config.{guess,sub}.
* Added debian/patches/gcc-4.3-fix.patch from Martin Michlmayr,
closes: #417764
* wmlxgettext got removed from bin_SCRIPTS with good reasoning so we won't
install it anymore.
wesnoth (1.2.4-1ubuntu1) gutsy; urgency=low
* Merge from debian unstable, remaining changes:
* debian/control
- removed wesnoth-server from the wesnoth-all deps.
wesnoth (1.2.4-1) unstable; urgency=low
* New upstream release
wesnoth (1.2.4-0ubuntu1) gutsy; urgency=low
* New upstream release
* debian/control
- removed wesnoth-server from the wesnoth-all deps (LP: #107541)
wesnoth (1.2.3-1) experimental; urgency=low
* New upstream release
-- John Dong <email address hidden> Wed, 25 Jul 2007 10:06:50 +0100
-
wesnoth (1.2.3-0ubuntu1.3) feisty-security; urgency=low
* SECURITY UPDATE:
+ CVE-2007-6201: Unspecified vulnerability in Wesnoth before 1.2.8 allows
attackers to cause a denial of service (hang) via a "faulty add-on" and
possibly execute other commands via unknown vectors related to the turn_cmd
option.
* debian/patches/CVE-2007-6201.patch:
- Applied patch by upstream
- Link 1: http://svn.gna.org/viewcvs/wesnoth/branches/1.2/src/playsingle_controller.cpp?r2=21907&rev=21907&r1=16732&dir_pagestart=100
- Link 2: http://svn.gna.org/viewcvs/wesnoth/branches/1.2/src/preferences.cpp?r2=21907&rev=21907&r1=18008&dir_pagestart=100
* References:
CVE-2007-6201
http://sourceforge.net/project/shownotes.php?release_id=557098
-- Stephan Hermann <email address hidden> Tue, 04 Dec 2007 14:44:32 +0100
-
wesnoth (1.2.3-0ubuntu1.1) feisty-security; urgency=low
* SECURITY UPDATE: Fix insecure truncate of a multibyte chat message that
can lead to invalid utf-8 and throw an uncaught exception. Both wesnoth
client and server are affected.
* debian/patches/CVE-2007-3917: added, taken from Debian.
* References: CVE-2007-3917.
LP: #158414.
* SECURITY UPDATE: Do not allow '../' in file paths. It allowed others
to view the content of files in the remote computers.
* debian/patches/CVE-2007-5742: added, taken from upstream SVN r21904.
* References:
CVE-2007-5742.
LP: #172783.
-- Emilio Pozuelo Monfort <email address hidden> Sun, 02 Dec 2007 22:07:37 +0100
-
wesnoth (1.2.3-0ubuntu1) feisty; urgency=low
* New upstream release (UVF LP: #94132)
-- Emilio Pozuelo Monfort <email address hidden> Tue, 20 Mar 2007 17:27:45 +0100
-
wesnoth (1.2.2-0ubuntu1) feisty; urgency=low
* New upstream release (UVF LP: #90407)
* debian/control
- Changed maintainer to MOTU
- Created wesnoth-all metapackage (LP: #82436)
- Added libsdl1.2-dev to Build-deps (fix FTBFS)
-- Emilio Pozuelo Monfort <email address hidden> Wed, 14 Mar 2007 23:10:08 +0100
-
wesnoth (1.2-1) unstable; urgency=low
* New upstream release
-- Michael Bienia <email address hidden> Fri, 12 Jan 2007 13:21:29 +0000
-
wesnoth (1.1.14-1) unstable; urgency=low
* New upstream release
wesnoth (1.1.13-1) experimental; urgency=low
* New upstream release
-- Ubuntu Archive Auto-Sync <email address hidden> Wed, 20 Dec 2006 13:09:51 +0000
-
wesnoth (1.1.12-1) unstable; urgency=high
* Urgency high as it fixes a grave (crash) bug and a bunch of other
bugs reported to upstream (it's mainly a bugfix release)
In addition, it will be compatible to play multiplayer with
the upcoming 1.2 stable version, while 1.1.11 isn't
* New upstream release
* Fixes crash when opening contributors page, closes: #393563
* Adds a (hidden, as we are in string freeze) option to set the
frequency for music, closes: #357786
-- Ubuntu Archive Auto-Sync <email address hidden> Fri, 10 Nov 2006 17:55:49 +0000
-
wesnoth (1.1.11-1) unstable; urgency=low
* New upstream release
wesnoth (1.1.10-1) unstable; urgency=low
* New upstream release,
closes: #385564 , segfault in Bay of Pearls when grabbing trident
* Move Depends: ttf-dejavu to wesnoth-data, closes: #386461
* Add symlink for Japanese font, closes: #385347
wesnoth (1.1.9-1) unstable; urgency=low
* New upstream release
* Link wesnoth-icon.png from /usr/share/icons/, closes: #327822
* Use -f when removing pidfile in init.d script, so wesnothd stop doesn't
fail when wesnothd is stopped, closes: #369673, #381601
-- Ubuntu Archive Auto-Sync <email address hidden> Wed, 08 Nov 2006 20:05:25 +0000
-
wesnoth (1.1.8-1) unstable; urgency=low
* New upstream release,
closes: #374830: wesnoth crash when selecting 'Campaign' and no campaign
package is installed
* Install all files in images/maps/ into wesnoth-data package,
closes: #377290
-- Daniel T Chen <email address hidden> Mon, 31 Jul 2006 11:07:51 +0100
