openSUSE Security Update: Security update for freeciv ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:10096-1 Rating: important References: #1202548 Cross-References: CVE-2022-6083 Affected Products: openSUSE Backports SLE-15-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for freeciv fixes the following issues: - update to 3.0.3 (boo#1202548, CVE-2022-6083): * 3.0.3 is a bugfix release * see https://freeciv.fandom.com/wiki/NEWS-3.0.3 - update to 3.0.2: * 3.0.2 is a generic bugfix release * see https://freeciv.fandom.com/wiki/NEWS-3.0.2 - update to 3.0.1: * 3.0.1 is a generic bugfix release * see https://freeciv.fandom.com/wiki/NEWS-3.0.1 - update to 3.0.0: * This release is a major upgrade which with some changes that can support backward compatible rulesets * see https://freeciv.fandom.com/wiki/NEWS-3.0.0#WHAT.27S_CHANGED_SINCE_2.6 - update to 2.6.6: * https://freeciv.fandom.com/wiki/NEWS-2.6.5 * 2.6.6 is a bugfix release. - update to 2.6.5: * https://freeciv.fandom.com/wiki/NEWS-2.6.5 * 2.6.5 is a bugfix release. Notably it fixes regression in 2.6.4 gtk3-client that present units in city dialog had no overlays drawn at all. - Update to 2.6.4: * Bugfix release, see https://freeciv.fandom.com/wiki/NEWS-2.6.4 - update to 2.6.3: * see http://www.freeciv.org/wiki/NEWS-2.6.3 * Fixed trouble when a new city is founded to the ruins of a former city, and that new city establish a trade route with a player who had seen former city, and is unaware that it had been destroyed HRM#871606 * Fixed a case where shared vision did not completely update recipient's map HRM#846106 * Fixed a bug where one could paradrop to peaceful nation's territory after continuing game from an old savegame HRM#879084 * Fixed a bug causing game sometimes to tell wrong reason of why an action failed HRM#879880 * Cease fire no longer runs out with an already dead player, making his former allies to hate the alive party of the treaty HRM#879055 * Made server not to end in a infinite loop after loading savegame with too high phase number. Such a savegame was reported to be created after spaceship was launched but game was still continued HRM#815196 * Unified writing of the city name Washington-on-the-Brazos between rulesets, so it doesn't appear multiple times in the same game in a bit different form HRM#867817 * Stealth units are no longer erroneously hidden even from allies HRM#764976 * Placing initial units is now done in shuffled player order HRM#850656 * Corrupt worker tasks are cleared. Those can originate, e.g., from buggy pre-2.6.2.1 Qt-client, and live in old savegames HRM#901938 * In a ruleset, such as civ2civ3, where caravans can help building wonder in a foreign city, refresh city info of the city owner when one does HRM#907977 * Display of success probabilities for diplomats was off when targeting stack of units instead of individual unit HRM#859761 * Fixed pillaging of extras that are caused by something else than player actions. For the fix to work, both server and client must be at least version 2.6.3 HRM#861508 * Civilian unit trying to paradrop to an enemy city dies HRM#870004 * Prevented dead player from getting techs via Tech_Parasite effect. This caused trouble in alien ruleset where Tech_Parasite is granted by a tech HRM#873692 * Improved support of CityTile requirement type HRM#877780 * Fixed trouble preventing Small Wonders from working as impr_reqs for units HRM#884993 * Corrected success probability shown by action dialog when it depends on a special kind of road HRM#897490 * The included Lua engine has been upgraded from 5.3.5 to 5.3.6. HRM#889425 - update to 2.6.2.1: * Fixed server crash when unit with zero move_rate is transformed * Fixed crashes when using Direction objects in lua scripts * Fixed crash when chatline text had opening tag without closing tag * Fixes to the Qt client * Updated translations * Fixed Qt-client build against Qt-5.15 (removes freeciv-qt-5.15.patch ) * Documentation updates Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP3: zypper in -t patch openSUSE-2022-10096=1 Package List: - openSUSE Backports SLE-15-SP3 (aarch64 i586 ppc64le s390x x86_64): freeciv-3.0.3-bp153.2.3.1 freeciv-gtk3-3.0.3-bp153.2.3.1 freeciv-lang-3.0.3-bp153.2.3.1 freeciv-qt-3.0.3-bp153.2.3.1 References: https://www.suse.com/security/cve/CVE-2022-6083.html https://bugzilla.suse.com/1202548