mail[Wesnoth-commits] r33270 - /trunk/RELEASE_NOTES


Others Months | Index by Date | Thread Index
>>   [Date Prev] [Date Next] [Thread Prev] [Thread Next]

Header


Content

Posted by jeremy . rosen on March 01, 2009 - 22:04:
Author: boucman
Date: Sun Mar  1 22:04:58 2009
New Revision: 33270

URL: http://svn.gna.org/viewcvs/wesnoth?rev=33270&view=rev
Log:
add a 'test this release' note

Modified:
    trunk/RELEASE_NOTES

Modified: trunk/RELEASE_NOTES
URL: 
http://svn.gna.org/viewcvs/wesnoth/trunk/RELEASE_NOTES?rev=33270&r1=33269&r2=33270&view=diff
==============================================================================
--- trunk/RELEASE_NOTES (original)
+++ trunk/RELEASE_NOTES Sun Mar  1 22:04:58 2009
@@ -16,5 +16,34 @@
 stabilise now. If you see bugs which should be fixed before 1.6 please report
 them in the bug tracker.
 
+* titlescreen/landscapebattlefield.jpg -> story/landscape-battlefield.jpg
+* titlescreen/landscapebridge.jpg -> story/landscape-bridge.jpg
+* titlescreen/landscapecastle.jpg -> story/landscape-castle.jpg
+
+***
+
+This release contains an important security update, fixing a
+vulnerability that could allow third-party content (such as campaigns
+downloaded from the add-on server) to execute arbitrary code with user
+account privileges.  See bug #31048 for details.  All content
+currently on the official add-on server has been inspected to confirm
+that none of it exploits this vulnerability, and the add-on server
+itself has been patched to ensure that exploits can no longer be
+uploaded.  Therefore, users of previous versions of Battle for Wesnoth
+who have received user-made content through the official add-on server
+and no other distribution channel need not fear that their system has
+been compromised.
+
+CVE-2009-0367 has been assigned to this vulnerability and may provide
+further information.
+
+
+This release is the first 1.6 release candidate, it means that no further 
+compatibility-breaking changes are expected. We invite all content providers,
+wesnoth related external sites and anybody concerned to test compatibility 
+with this release. We also encourage players to try this release heavily.
+Now is the time to report all the bugs that are obvious to you but that we 
+never heard of.
+
 The message dialog got overhauled with some new images, these are 
placeholders.
 They will be polished before 1.6.




Related Messages


Powered by MHonArc, Updated Sun Mar 01 22:20:16 2009