freeciv 2.3.2-1+deb7u1 source package in Debian

Changelog

freeciv (2.3.2-1+deb7u1) stable; urgency=medium


  * Fix CVE-2012-5645 and CVE-2012-6083.
    - CVE-2012-5645: Added return value indicating success or failure for all
      dio_get_xxx() functions, and check that value to avoid infinite loop in
      reading arrays from network when there's no more data even though it's
      expected.
    - CVE-2012-6083: Sanity check packet length received over network against
      values less than header length alone to avoid situation where body length
      is considered negative.

 -- Markus Koschany <email address hidden>  Tue, 11 Feb 2014 14:27:45 +0100