Format: 1.8 Date: Thu, 02 Aug 2012 15:01:30 +0200 Source: redeclipse Binary: redeclipse redeclipse-dbg redeclipse-server redeclipse-server-dbg Architecture: i386 Version: 1.2-2ubuntu0.1 Distribution: precise Urgency: low Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Martin Erik Werner Description: redeclipse - single-player and multi-player first-person ego-shooter redeclipse-dbg - debug symbols for the Red Eclipse FPS game redeclipse-server - server for the Red Eclipse FPS game redeclipse-server-dbg - debug symbols for the Red Eclipse dedicated server Launchpad-Bugs-Fixed: 1034148 Changes: redeclipse (1.2-2ubuntu0.1) precise-security; urgency=low . * SECURITY UPDATE: Game maps can in cube2-engine games be transmitted either from server to client or from client to client, which includes a config file (mapname.cfg) which is in "cubescript" format, this makes it possible for an attacker to send a malign script via a new map (which must be chosen by admin on a server, or created in cooperative editing mode). A script like this could trivially read/write to any files which the user running the client has access to (it is executed when the client loads the map). (LP: #1034148) - Add debian/patches/security-text-command-fix.patch This patch stops "textedit" commands being able to be run in map-run scripts, thus disabling the ability to read/write to user files. Checksums-Sha1: 08d0c642bb64c232135a5058916a857588116fc5 1341012 redeclipse_1.2-2ubuntu0.1_i386.deb 231cee318595905d9d56026af0da6c39726d99be 3616634 redeclipse-dbg_1.2-2ubuntu0.1_i386.deb f516e26b4d244f2de06eb740dd11849163094e18 247734 redeclipse-server_1.2-2ubuntu0.1_i386.deb 31f0c17063f4635ca61ebe1f062cc99e4e90c8fa 525574 redeclipse-server-dbg_1.2-2ubuntu0.1_i386.deb Checksums-Sha256: 59126a8ba5eafcfd91a55223d27edd2e4a438f71d4ad9d3ce208d29debbbf134 1341012 redeclipse_1.2-2ubuntu0.1_i386.deb 1cd98089586a61c412238ade8999d257e56ec200133b6064683172f1b488713a 3616634 redeclipse-dbg_1.2-2ubuntu0.1_i386.deb f331cacd93d19ee1f04d0130a6632478d4d593b169aa81deb63cb06659a6e5b2 247734 redeclipse-server_1.2-2ubuntu0.1_i386.deb 80f3afceb8e02ae8915a57fa56f6677c5d4bd125027cb4cc5d63742117bc762b 525574 redeclipse-server-dbg_1.2-2ubuntu0.1_i386.deb Files: 608b364aa4aaabcbe1e22603767d3a16 1341012 contrib/games optional redeclipse_1.2-2ubuntu0.1_i386.deb 5feffe9da0471519c8f38c3f48937518 3616634 contrib/debug extra redeclipse-dbg_1.2-2ubuntu0.1_i386.deb 8acc997edaf86fe2f422ad020f566ac2 247734 contrib/games optional redeclipse-server_1.2-2ubuntu0.1_i386.deb 7d330125b3f30ef5544b7c5164e1561d 525574 contrib/debug extra redeclipse-server-dbg_1.2-2ubuntu0.1_i386.deb Original-Maintainer: Debian Games Team