ioquake3_1.36+svn2224-4_amd64.changes ACCEPTED into unstable
Debian FTP Masters
ftpmaster at ftp-master.debian.org
Thu Jun 14 22:48:48 UTC 2012
Accepted:
ioquake3-dbg_1.36+svn2224-4_amd64.deb
to main/i/ioquake3/ioquake3-dbg_1.36+svn2224-4_amd64.deb
ioquake3-server_1.36+svn2224-4_amd64.deb
to main/i/ioquake3/ioquake3-server_1.36+svn2224-4_amd64.deb
ioquake3_1.36+svn2224-4.debian.tar.gz
to main/i/ioquake3/ioquake3_1.36+svn2224-4.debian.tar.gz
ioquake3_1.36+svn2224-4.dsc
to main/i/ioquake3/ioquake3_1.36+svn2224-4.dsc
ioquake3_1.36+svn2224-4_amd64.deb
to main/i/ioquake3/ioquake3_1.36+svn2224-4_amd64.deb
Changes:
ioquake3 (1.36+svn2224-4) unstable; urgency=high
.
* Fix symlink attack in /tmp by moving pid file into the user-specific
directory ~/.q3a, ~/.openarena etc. (CVE-2012-3345)
* As a precaution, remove Sys_TempPath() altogether, so that any
other unsafe usage will fail
Override entries for your package:
ioquake3-dbg_1.36+svn2224-4_amd64.deb - extra debug
ioquake3-server_1.36+svn2224-4_amd64.deb - optional games
ioquake3_1.36+svn2224-4.dsc - source games
ioquake3_1.36+svn2224-4_amd64.deb - optional games
Announcing to debian-devel-changes at lists.debian.org
Thank you for your contribution to Debian.
More information about the Pkg-games-devel
mailing list