openSUSE-SU-2022:10096-1: important: Security update for freeciv
openSUSE Security Update: Security update for freeciv
______________________________________________________________________________
Announcement ID: openSUSE-SU-2022:10096-1
Rating: important
References: #1202548
Cross-References: CVE-2022-6083
Affected Products:
openSUSE Backports SLE-15-SP3
______________________________________________________________________________
An update that fixes one vulnerability is now available.
Description:
This update for freeciv fixes the following issues:
- update to 3.0.3 (boo#1202548, CVE-2022-6083):
* 3.0.3 is a bugfix release
* see https://freeciv.fandom.com/wiki/NEWS-3.0.3
- update to 3.0.2:
* 3.0.2 is a generic bugfix release
* see https://freeciv.fandom.com/wiki/NEWS-3.0.2
- update to 3.0.1:
* 3.0.1 is a generic bugfix release
* see https://freeciv.fandom.com/wiki/NEWS-3.0.1
- update to 3.0.0:
* This release is a major upgrade which with some changes that can
support backward compatible rulesets
* see
https://freeciv.fandom.com/wiki/NEWS-3.0.0#WHAT.27S_CHANGED_SINCE_2.6
- update to 2.6.6:
* https://freeciv.fandom.com/wiki/NEWS-2.6.5
* 2.6.6 is a bugfix release.
- update to 2.6.5:
* https://freeciv.fandom.com/wiki/NEWS-2.6.5
* 2.6.5 is a bugfix release. Notably it fixes regression in 2.6.4
gtk3-client that present units in city dialog had no overlays drawn at
all.
- Update to 2.6.4:
* Bugfix release, see https://freeciv.fandom.com/wiki/NEWS-2.6.4
- update to 2.6.3:
* see http://www.freeciv.org/wiki/NEWS-2.6.3
* Fixed trouble when a new city is founded to the ruins of a former
city, and that new city establish a trade route with a player who had
seen former city, and is unaware that it had been destroyed HRM#871606
* Fixed a case where shared vision did not completely update recipient's
map HRM#846106
* Fixed a bug where one could paradrop to peaceful nation's territory
after continuing game from an old savegame HRM#879084
* Fixed a bug causing game sometimes to tell wrong reason of why an
action failed HRM#879880
* Cease fire no longer runs out with an already dead player, making his
former allies to hate the alive party of the treaty HRM#879055
* Made server not to end in a infinite loop after loading savegame with
too high phase number. Such a savegame was reported to be created
after spaceship was launched but game was still continued HRM#815196
* Unified writing of the city name Washington-on-the-Brazos between
rulesets, so it doesn't appear multiple times in the same game in a
bit different form HRM#867817
* Stealth units are no longer erroneously hidden even from allies
HRM#764976
* Placing initial units is now done in shuffled player order HRM#850656
* Corrupt worker tasks are cleared. Those can originate, e.g., from
buggy pre-2.6.2.1 Qt-client, and live in old savegames HRM#901938
* In a ruleset, such as civ2civ3, where caravans can help building
wonder in a foreign city, refresh city info of the city owner when one
does HRM#907977
* Display of success probabilities for diplomats was off when targeting
stack of units instead of individual unit HRM#859761
* Fixed pillaging of extras that are caused by something else than
player actions. For the fix to work, both server and client must be at
least version 2.6.3 HRM#861508
* Civilian unit trying to paradrop to an enemy city dies HRM#870004
* Prevented dead player from getting techs via Tech_Parasite effect.
This caused trouble in alien ruleset where Tech_Parasite is granted by
a tech HRM#873692
* Improved support of CityTile requirement type HRM#877780
* Fixed trouble preventing Small Wonders from working as impr_reqs for
units HRM#884993
* Corrected success probability shown by action dialog when it depends
on a special kind of road HRM#897490
* The included Lua engine has been upgraded from 5.3.5 to 5.3.6.
HRM#889425
- update to 2.6.2.1:
* Fixed server crash when unit with zero move_rate is transformed
* Fixed crashes when using Direction objects in lua scripts
* Fixed crash when chatline text had opening tag without closing tag
* Fixes to the Qt client
* Updated translations
* Fixed Qt-client build against Qt-5.15 (removes freeciv-qt-5.15.patch )
* Documentation updates
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Backports SLE-15-SP3:
zypper in -t patch openSUSE-2022-10096=1
Package List:
- openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64):
freeciv-3.0.3-bp153.2.3.1
freeciv-gtk3-3.0.3-bp153.2.3.1
freeciv-lang-3.0.3-bp153.2.3.1
freeciv-qt-3.0.3-bp153.2.3.1
References:
https://www.suse.com/security/cve/CVE-2022-6083.html
https://bugzilla.suse.com/1202548
A freeciv security update has been released for SUSE Linux Enterprise 15 SP3.
