Bug 195520 – games-strategy/wesnoth <1.2.7 Denial of Service Vulnerability (CVE-2007-3917)

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description Tobias Heinlein (RETIRED) 2007-10-11 17:38:13 UTC]

CVE-2007-3917 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-3917):
  Unspecified vulnerability in the multiplayer engine in Wesnoth before 1.2.7
  allows remote servers to cause a denial of service (client application crash)
  via invalid UTF-8 strings.  NOTE: some of these details are obtained from
  third-party information.

[Comment 1 Tobias Heinlein (RETIRED) 2007-10-11 17:41:36 UTC]

Games, please create an updated ebuild.

[Comment 2 Robert Buchholz (RETIRED) 2007-10-11 20:29:18 UTC]

games, is the 1.2.7 in the tree ok to go stable?

[Comment 3 Mr. Bones. (RETIRED) 2007-10-11 21:28:32 UTC]

Already in portage.  Just needs to be stablized.

[Comment 4 Christian Faulhammer (RETIRED) 2007-10-12 08:09:42 UTC]

x86 stable

[Comment 5 Tobias Scherbaum (RETIRED) 2007-10-12 17:51:48 UTC]

ppc stable

[Comment 6 Markus Rothe (RETIRED) 2007-10-14 15:59:01 UTC]

ppc64 stable

[Comment 7 Ferris McCormick (RETIRED) 2007-10-18 14:46:54 UTC]

Stable on sparc.

[Comment 8 Mike Doty (RETIRED) 2007-10-22 04:14:06 UTC]

amd64 stable

[Comment 9 Sune Kloppenborg Jeppesen (RETIRED) 2007-10-22 07:04:13 UTC]

This one is ready for GLSA vote and I vote NO.

[Comment 10 Raphael Marichez (Falco) (RETIRED) 2007-10-22 20:18:37 UTC]

only client-side crash?  -> clearly noglsa

[Comment 11 Sune Kloppenborg Jeppesen (RETIRED) 2007-10-22 20:24:41 UTC]

2 NO votes win.