Debian Package Tracker

A new upstream version is available: 2.0.16235 high

A new upstream version 2.0.16235 is available, you should consider packaging it.

Created: 2017-12-08 Last update: 2019-10-15 21:06

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2018-1000546: Triplea version <= 1.9.0.0.10291 contains a XML External Entity (XXE) vulnerability in Importing game data that can result in Possible information disclosure, server-side request forgery, or remote code execution. This attack appear to be exploitable via Specially crafted game data file (XML).

Please fix it.

Created: 2018-06-28 Last update: 2019-08-27 15:18

1 security issue in bullseye high

There is 1 open security issue in bullseye.

1 important issue:

CVE-2018-1000546: Triplea version <= 1.9.0.0.10291 contains a XML External Entity (XXE) vulnerability in Importing game data that can result in Possible information disclosure, server-side request forgery, or remote code execution. This attack appear to be exploitable via Specially crafted game data file (XML).

Please fix it.

Created: 2019-08-27 Last update: 2019-08-27 15:18

lintian reports 2 warnings normal

Lintian reports 2 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2019-09-01 Last update: 2019-09-01 15:21

1 ignored security issue in stretch low

There is 1 open security issue in stretch.

1 issue skipped by the security teams:

CVE-2018-1000546: Triplea version <= 1.9.0.0.10291 contains a XML External Entity (XXE) vulnerability in Importing game data that can result in Possible information disclosure, server-side request forgery, or remote code execution. This attack appear to be exploitable via Specially crafted game data file (XML).

Please fix it.

Created: 2018-06-28 Last update: 2019-08-27 15:18

1 ignored security issue in jessie low

There is 1 open security issue in jessie.

1 issue skipped by the security teams:

CVE-2018-1000546: Triplea version <= 1.9.0.0.10291 contains a XML External Entity (XXE) vulnerability in Importing game data that can result in Possible information disclosure, server-side request forgery, or remote code execution. This attack appear to be exploitable via Specially crafted game data file (XML).

Please fix it.

Created: 2018-06-28 Last update: 2019-08-27 15:18

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.4.1 instead of 4.2.1).

Created: 2018-12-23 Last update: 2019-09-29 23:39

triplea