Debian Package Tracker

A new upstream version is available: 1.9.0.0.12469 high

A new upstream version 1.9.0.0.12469 is available, you should consider packaging it.

Created: 2017-12-08 Last update: 2018-10-21 11:10

1 security issue in buster high

There is 1 open security issue in buster.

1 important issue:

CVE-2018-1000546: Triplea version <= 1.9.0.0.10291 contains a XML External Entity (XXE) vulnerability in Importing game data that can result in Possible information disclosure, server-side request forgery, or remote code execution. This attack appear to be exploitable via Specially crafted game data file (XML).

Please fix it.

Created: 2018-06-28 Last update: 2018-10-14 08:57

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2018-1000546: Triplea version <= 1.9.0.0.10291 contains a XML External Entity (XXE) vulnerability in Importing game data that can result in Possible information disclosure, server-side request forgery, or remote code execution. This attack appear to be exploitable via Specially crafted game data file (XML).

Please fix it.

Created: 2018-06-28 Last update: 2018-10-14 08:57

lintian reports 2 warnings normal

Lintian reports 2 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2018-10-12 Last update: 2018-10-12 08:28

1 ignored security issue in jessie low

There is 1 open security issue in jessie.

1 issue skipped by the security teams:

CVE-2018-1000546: Triplea version <= 1.9.0.0.10291 contains a XML External Entity (XXE) vulnerability in Importing game data that can result in Possible information disclosure, server-side request forgery, or remote code execution. This attack appear to be exploitable via Specially crafted game data file (XML).

Please fix it.

Created: 2018-06-28 Last update: 2018-10-14 08:57

1 ignored security issue in stretch low

There is 1 open security issue in stretch.

1 issue skipped by the security teams:

CVE-2018-1000546: Triplea version <= 1.9.0.0.10291 contains a XML External Entity (XXE) vulnerability in Importing game data that can result in Possible information disclosure, server-side request forgery, or remote code execution. This attack appear to be exploitable via Specially crafted game data file (XML).

Please fix it.

Created: 2018-06-28 Last update: 2018-10-14 08:57

triplea