
CVE catalog
CVE-2022-6083
freeciv-3.0.3-1.1 on GA media
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
This update for freeciv fixes the following issues: - update to 3.0.3 (boo#1202548, CVE-2022-6083): * 3.0.3 is a bugfix release * see https://freeciv.fandom.com/wiki/NEWS-3.0.3 - update to 3.0.2: * 3.0.2 is a generic bugfix release * see https://freeciv.fandom.com/wiki/NEWS-3.0.2 - update to 3.0.1: * 3.0.1 is a generic bugfix release * see https://freeciv.fandom.com/wiki/NEWS-3.0.1 - update to 3.0.0: * This release is a major upgrade which with some changes that can support backward compatible rulesets * see https://freeciv.fandom.com/wiki/NEWS-3.0.0#WHAT.27S_CHANGED_SINCE_2.6 - update to 2.6.6: * https://freeciv.fandom.com/wiki/NEWS-2.6.5 * 2.6.6 is a bugfix release. - update to 2.6.5: * https://freeciv.fandom.com/wiki/NEWS-2.6.5 * 2.6.5 is a bugfix release. Notably it fixes regression in 2.6.4 gtk3-client that present units in city dialog had no overlays drawn at all. - Update to 2.6.4: * Bugfix release, see https://freeciv.fandom.com/wiki/NEWS-2.6.4 - update to 2.6.3: * see http://www.freeciv.org/wiki/NEWS-2.6.3 * Fixed trouble when a new city is founded to the ruins of a former city, and that new city establish a trade route with a player who had seen former city, and is unaware that it had been destroyed HRM#871606 * Fixed a case where shared vision did not completely update recipient's map HRM#846106 * Fixed a bug where one could paradrop to peaceful nation's territory after continuing game from an old savegame HRM#879084 * Fixed a bug causing game sometimes to tell wrong reason of why an action failed HRM#879880 * Cease fire no longer runs out with an already dead player, making his former allies to hate the alive party of the treaty HRM#879055 * Made server not to end in a infinite loop after loading savegame with too high phase number. Such a savegame was reported to be created after spaceship was launched but game was still continued HRM#815196 * Unified writing of the city name Washington-on-the-Brazos between rulesets, so it doesn't appear multiple times in the same game in a bit different form HRM#867817 * Stealth units are no longer erroneously hidden even from allies HRM#764976 * Placing initial units is now done in shuffled player order HRM#850656 * Corrupt worker tasks are cleared. Those can originate, e.g., from buggy pre-2.6.2.1 Qt-client, and live in old savegames HRM#901938 * In a ruleset, such as civ2civ3, where caravans can help building wonder in a foreign city, refresh city info of the city owner when one does HRM#907977 * Display of success probabilities for diplomats was off when targeting stack of units instead of individual unit HRM#859761 * Fixed pillaging of extras that are caused by something else than player actions. For the fix to work, both server and client must be at least version 2.6.3 HRM#861508 * Civilian unit trying to paradrop to an enemy city dies HRM#870004 * Prevented dead player from getting techs via Tech_Parasite effect. This caused trouble in alien ruleset where Tech_Parasite is granted by a tech HRM#873692 * Improved support of CityTile requirement type HRM#877780 * Fixed trouble preventing Small Wonders from working as impr_reqs for units HRM#884993 * Corrected success probability shown by action dialog when it depends on a special kind of road HRM#897490 * The included Lua engine has been upgraded from 5.3.5 to 5.3.6. HRM#889425 - update to 2.6.2.1: * Fixed server crash when unit with zero move_rate is transformed * Fixed crashes when using Direction objects in lua scripts * Fixed crash when chatline text had opening tag without closing tag * Fixes to the Qt client * Updated translations * Fixed Qt-client build against Qt-5.15 (removes freeciv-qt-5.15.patch ) * Documentation updates
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Suse | freeciv | package hub 15 sp3 | 3.0.3-bp153.2.3.1 | fixed |
| Opensuse | freeciv | leap 15.3 | 3.0.3-bp153.2.3.1 | fixed |
| Suse | freeciv | package hub 15 sp4 | 3.0.3-bp154.2.3.1 | fixed |
| Opensuse | freeciv | leap 15.4 | 3.0.3-bp154.2.3.1 | fixed |
| Opensuse | freeciv | tumbleweed | 3.0.3-1.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Suse | freeciv | rpm | package hub 15 sp3 | 3.0.3-bp153.2.3.1 | Not reported | OPENSUSE-SU-2022:10096-1 | Not reported |
| Opensuse | freeciv | rpm | leap 15.3 | 3.0.3-bp153.2.3.1 | Not reported | OPENSUSE-SU-2022:10096-1 | Not reported |
| Suse | freeciv | rpm | package hub 15 sp4 | 3.0.3-bp154.2.3.1 | Not reported | OPENSUSE-SU-2022:10102-1 | Not reported |
| Opensuse | freeciv | rpm | leap 15.4 | 3.0.3-bp154.2.3.1 | Not reported | OPENSUSE-SU-2022:10102-1 | Not reported |
| Opensuse | freeciv | rpm | tumbleweed | 3.0.3-1.1 | Not reported | OPENSUSE-SU-2024:12272-1 | Not reported |
OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
[openSUSE Tumbleweed]
- [freeciv]Unknown
Source package: [freeciv]
Details (1)
3.2.5-2.1· x86_64 · tumbleweedFixed · Fixed:
3.0.3-1.1pypi · freeciv · opensuse · tumbleweed
- [freeciv-gtk3]Unknown
Source package: [freeciv]
Details (1)
3.2.5-2.1· x86_64 · tumbleweedUnknown · Fixed:
3.0.3-1.1Version impact unknown
pypi · freeciv · opensuse · tumbleweed
- [freeciv-gtk4]Unknown
Source package: [freeciv]
Details (1)
3.2.5-2.1· x86_64 · tumbleweedUnknown · Fixed:
3.0.3-1.1Version impact unknown
pypi · freeciv · opensuse · tumbleweed
- [freeciv-lang]Unknown
Source package: [freeciv]
Details (1)
3.2.5-2.1· noarch · tumbleweedUnknown · Fixed:
3.0.3-1.1Version impact unknown
pypi · freeciv · opensuse · tumbleweed
- [freeciv-qt]Unknown
Source package: [freeciv]
Details (1)
3.2.5-2.1· x86_64 · tumbleweedUnknown · Fixed:
3.0.3-1.1Version impact unknown
pypi · freeciv · opensuse · tumbleweed
- [freeciv-sdl2]Unknown
Source package: [freeciv]
Details (1)
3.2.5-2.1· x86_64 · tumbleweedUnknown · Fixed:
3.0.3-1.1Version impact unknown
pypi · freeciv · opensuse · tumbleweed
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2022_10096-1.json]
- [https://osv.dev/vulnerability/openSUSE-SU-2022:10096-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2022:10102-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:12272-1]
[OSV Package Vulnerability Database] · [SUSE security advisories and VEX]