MGASA-2015-0034
Updated freeciv packages fix a security vulnerability
Updated freeciv packages to latest bugfix version, also fixing security vulnerability
Freeciv 2.4.1 in Mageia 4 was built against an embedded version of lua 5.1, vulnerable to the following security issue:
A heap-based overflow vulnerability was found in the way Lua handles varargs functions with many fixed parameters called with few arguments, leading to application crashes or, potentially, arbitrary code execution (CVE-2014-5461, mga#14038).
As of this update, Freeciv is now built against the patched system version of lua 5.1.
This update also provides Freeciv 2.4.4, a maintenance release in the 2.4.x stable branch with numerous bug fixes and minor new features. See the referenced release notes for details.
What each source reports
OSV No score
Updated freeciv packages fix a security vulnerability
Updated freeciv packages to latest bugfix version, also fixing security vulnerability
Freeciv 2.4.1 in Mageia 4 was built against an embedded version of lua 5.1, vulnerable to the following security issue:
A heap-based overflow vulnerability was found in the way Lua handles varargs functions with many fixed parameters called with few arguments, leading to application crashes or, potentially, arbitrary code execution (CVE-2014-5461, mga#14038).
As of this update, Freeciv is now built against the patched system version of lua 5.1.
This update also provides Freeciv 2.4.4, a maintenance release in the 2.4.x stable branch with numerous bug fixes and minor new features. See the referenced release notes for details.
- Record
MGASA-2015-0034- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
freecivMageia:4 |
before 2.4.4-1.mga4 | 2.4.4-1.mga4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2015-0034 is a vulnerability with no CVSS score yet in freeciv, published January 21, 2015. No source lists public exploit code. Fixed in freeciv 2.4.4-1.mga4.