ALT-PU-2015-1711

Низкий

ALT-PU-2015-1711: package wesnoth update to version 1.12.4-alt1

Источник

errata.altlinux.org

Дата публикации

22.08.2015

Дата обновления

22.08.2015

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades wesnoth to version 1.12.4-alt1.

Устраненные уязвимости3

CVE-2015-0844

Средний 5

Дата публикации: 14.04.2015

CWE-200

The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote attackers to read arbitrary files via a crafted (1) campaign or (2) map file.

CVSS 2.0

Средний 5

AV:N/AC:L/Au:N/C:P/I:N/A:N

Access vector: Network
Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: None
Availability: None

Ссылки

CVE-2015-0844 https://nvd.nist.gov/vuln/detail/CVE-2015-0844

Ссылки1

ALT-PU-2015-1711 https://errata.altlinux.org/ALT-PU-2015-1711

Связанные уязвимости

CVE-2015-0844

ubuntu

больше 11 лет назад

The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote attackers to read arbitrary files via a crafted (1) campaign or (2) map file.

CVE-2015-0844

nvd

больше 11 лет назад

The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote attackers to read arbitrary files via a crafted (1) campaign or (2) map file.

CVE-2015-0844

debian

больше 11 лет назад

The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x ...

GHSA-fjh5-4xff-hw35

github

больше 4 лет назад

The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote attackers to read arbitrary files via a crafted (1) campaign or (2) map file.

CVE-2015-5070

CVSS3: 3.1

ubuntu

около 9 лет назад

The (1) filesystem::get_wml_location function in filesystem.cpp and (2) is_legal_file function in filesystem_boost.cpp in Battle for Wesnoth before 1.12.4 and 1.13.x before 1.13.1, when a case-insensitive filesystem is used, allow remote attackers to obtain sensitive information via vectors related to inclusion of .pbl files from WML. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-5069.