Package: pioneers Version: 0.11.2-2 Severity: normal Tags: security, fixed-upstream, patch
By sending special codes to the pioneers server, it can be made to crash. The game that was in progress is lost when this happens. It is not possible to execute code using this bug. The patch for this problem is here: http://sourceforge.net/tracker/index.php?func=detail&aid=1791176&group_id=5095&atid=305095 It is already applied in the new upstream release, 0.11.3, which I shall package soon. Security team: please let me know if I can/should do anything to get this patch into stable. I think it should apply directly to the stable package without problems (but I didn't test that yet). Thanks, Bas -- I encourage people to send encrypted e-mail (see http://www.gnupg.org). If you have problems reading my e-mail, use a better reader. Please send the central message of e-mails as plain text in the message body, not as HTML and definitely not as MS Word. Please do not use the MS Word format for attachments either. For more information, see http://pcbcn10.phys.rug.nl/e-mail.html
signature.asc
Description: Digital signature
