tremulous (1.1.0-6) unstable; urgency=medium

  This version of Tremulous is based on an older version of the Quake III
  Arena engine, which has no protection against malicious bytecode programs.
  It is not safe or secure when used with untrusted PK3 files.

  As a result, the Debian version of Tremulous no longer allows automatic
  downloading of PK3 files from game servers. The "Auto Download" menu
  option (the cl_allowDownload variable) still exists, but has no effect,
  and the engine always behaves as if it was set to 0. You may find that
  you are unable to join servers that use a modified version of Tremulous.

  Please treat all PK3 files as if they were executable programs, and only
  install them from trusted sources.

 -- Simon McVittie <smcv@debian.org>  Sun, 11 Dec 2011 17:52:26 +0000
