CVE-2022-6083
Security update for freeciv
[freeciv modpack installer buffer overflow]
What each source reports
OSVopenSUSE-SU-2022:10096-1 No score
Security update for freeciv
This update for freeciv fixes the following issues:
-
update to 3.0.3 (boo#1202548, CVE-2022-6083):
- 3.0.3 is a bugfix release
- see https://freeciv.fandom.com/wiki/NEWS-3.0.3
-
update to 3.0.2:
- 3.0.2 is a generic bugfix release
- see https://freeciv.fandom.com/wiki/NEWS-3.0.2
-
update to 3.0.1:
- 3.0.1 is a generic bugfix release
- see https://freeciv.fandom.com/wiki/NEWS-3.0.1
-
update to 3.0.0:
- This release is a major upgrade which with some changes that can support backward compatible rulesets
- see https://freeciv.fandom.com/wiki/NEWS-3.0.0#WHAT.27S_CHANGED_SINCE_2.6
-
update to 2.6.6:
- https://freeciv.fandom.com/wiki/NEWS-2.6.5
- 2.6.6 is a bugfix release.
-
update to 2.6.5:
- https://freeciv.fandom.com/wiki/NEWS-2.6.5
- 2.6.5 is a bugfix release. Notably it fixes regression in 2.6.4 gtk3-client that present units in city dialog had no overlays drawn at all.
-
Update to 2.6.4:
- Bugfix release, see https://freeciv.fandom.com/wiki/NEWS-2.6.4
-
update to 2.6.3:
- see http://www.freeciv.org/wiki/NEWS-2.6.3
- Fixed trouble when a new city is founded to the ruins of a former city, and that new city establish a trade route with a player who had seen former city, and is unaware that it had been destroyed HRM#871606
- Fixed a case where shared vision did not completely update recipient's map HRM#846106
- Fixed a bug where one could paradrop to peaceful nation's territory after continuing game from an old savegame HRM#879084
- Fixed a bug causing game sometimes to tell wrong reason of why an action failed HRM#879880
- Cease fire no longer runs out with an already dead player, making his former allies to hate the alive party of the treaty HRM#879055
- Made server not to end in a infinite loop after loading savegame with too high phase number. Such a savegame was reported to be created after spaceship was launched but game was still continued HRM#815196
- Unified writing of the city name Washington-on-the-Brazos between rulesets, so it doesn't appear multiple times in the same game in a bit different form HRM#867817
- Stealth units are no longer erroneously hidden even from allies HRM#764976
- Placing initial units is now done in shuffled player order HRM#850656
- Corrupt worker tasks are cleared. Those can originate, e.g., from buggy pre-2.6.2.1 Qt-client, and live in old savegames HRM#901938
- In a ruleset, such as civ2civ3, where caravans can help building wonder in a foreign city, refresh city info of the city owner when one does HRM#907977
- Display of success probabilities for diplomats was off when targeting stack of units instead of individual unit HRM#859761
- Fixed pillaging of extras that are caused by something else than player actions. For the fix to work, both server and client must be at least version 2.6.3 HRM#861508
- Civilian unit trying to paradrop to an enemy city dies HRM#870004
- Prevented dead player from getting techs via Tech_Parasite effect. This caused trouble in alien ruleset where Tech_Parasite is granted by a tech HRM#873692
- Improved support of CityTile requirement type HRM#877780
- Fixed trouble preventing Small Wonders from working as impr_reqs for units HRM#884993
- Corrected success probability shown by action dialog when it depends on a special kind of road HRM#897490
- The included Lua engine has been upgraded from 5.3.5 to 5.3.6. HRM#889425
-
update to 2.6.2.1:
- Fixed server crash when unit with zero move_rate is transformed
- Fixed crashes when using Direction objects in lua scripts
- Fixed crash when chatline text had opening tag without closing tag
- Fixes to the Qt client
- Updated translations
- Fixed Qt-client build against Qt-5.15 (removes freeciv-qt-5.15.patch )
- Documentation updates
- Record
openSUSE-SU-2022:10096-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2022:10102-1 No score
Security update for freeciv
This update for freeciv fixes the following issues:
-
update to 3.0.3 (boo#1202548, CVE-2022-6083):
- 3.0.3 is a bugfix release
- see https://freeciv.fandom.com/wiki/NEWS-3.0.3
-
update to 3.0.2:
- 3.0.2 is a generic bugfix release
- see https://freeciv.fandom.com/wiki/NEWS-3.0.2
-
update to 3.0.1:
- 3.0.1 is a generic bugfix release
- see https://freeciv.fandom.com/wiki/NEWS-3.0.1
-
update to 3.0.0:
- This release is a major upgrade which with some changes that can support backward compatible rulesets
- see https://freeciv.fandom.com/wiki/NEWS-3.0.0#WHAT.27S_CHANGED_SINCE_2.6
-
update to 2.6.6:
- https://freeciv.fandom.com/wiki/NEWS-2.6.5
- 2.6.6 is a bugfix release.
- Record
openSUSE-SU-2022:10102-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12272-1 No score
freeciv-3.0.3-1.1 on GA media
These are all security issues fixed in the freeciv-3.0.3-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12272-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-6083 No score
[freeciv modpack installer buffer overflow]
- Record
UBUNTU-CVE-2022-6083- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
freecivUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 2.5.1-12.5.2-12.5.3-12.5.3-1ubuntu0.1~esm1 |
None known |
freecivUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 2.5.9-12.5.10-12.5.10-1ubuntu0.1~esm1 |
None known |
freecivUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 2.6.0-32.6.0-42.6.1-12.6.2-12.6.2-1ubuntu0.1~esm1 |
None known |
freecivUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 2.6.3-12.6.5-12.6.6-12.6.6-1ubuntu0.1~esm1 |
None known |
freecivUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 3.0.8-13.0.8-23.0.8-2build13.1.0+ds-1build33.1.0+ds-1build43.1.0+ds-1build53.1.0+ds-1ubuntu0.1~esm1 |
None known |
freecivUbuntu:25.10 |
All versions, plus listed versions 3.1.4+ds-23.2.0+ds-1 |
None known |
freecivUbuntu:26.10 |
All versions, plus listed versions 3.2.4+ds-13.2.5+ds-13.2.6+ds-1 |
None known |
freecivUbuntu:26.04:LTS |
All versions, plus listed versions 3.2.0+ds-13.2.1+ds-13.2.1+ds-1build13.2.2+ds-13.2.4+ds-1 |
None known |
freecivSUSE:Package Hub 15 SP3 |
before 3.0.3-bp153.2.3.1 | 3.0.3-bp153.2.3.1 |
freecivopenSUSE:Leap 15.3 |
before 3.0.3-bp153.2.3.1 | 3.0.3-bp153.2.3.1 |
freecivSUSE:Package Hub 15 SP4 |
before 3.0.3-bp154.2.3.1 | 3.0.3-bp154.2.3.1 |
freecivopenSUSE:Leap 15.4 |
before 3.0.3-bp154.2.3.1 | 3.0.3-bp154.2.3.1 |
freecivopenSUSE:Tumbleweed |
before 3.0.3-1.1 | 3.0.3-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-6083 is a vulnerability with no CVSS score yet in freeciv, published August 18, 2022. No source lists public exploit code. Fixed in freeciv 3.0.3-bp153.2.3.1.
References
ubuntu.com/security/CVE-2022-6083
openwall.com/lists/oss-security/2022/08/05/1
cve.org/CVERecord?id=CVE-2022-6083
lists.opensuse.org/archives/list/[email protected]/thread/FGIIGXHCBJ6BXOPVIKR6NCU4TUBJIYLP
bugzilla.suse.com/1202548
suse.com/security/cve/CVE-2022-6083
lists.opensuse.org/archives/list/[email protected]/thread/CCKMMZKZ7XX4APE5H2QGYEIBBFEJYFIN