Advisories » MGASA-2026-0505

Updated freeciv package fixes security vulnerabilities

Publication date: 14 Oct 2026
Modification date: 14 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-90556 , CVE-2026-90557

Description

Freeciv before 3.2.6 Heap Buffer Overflow via worklist_load.
(CVE-2026-90556)
Freeciv 3.1.0 through 3.2.5 Out-of-Bounds Read via Savegame.
(CVE-2026-90557)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=36348
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FK3HSTSQRXCELDXHX2YMYSNARDQE5FW3/
• https://www.cve.org/CVERecord?id=CVE-2026-90556
• https://www.cve.org/CVERecord?id=CVE-2026-90557

SRPMS

10/core

• freeciv-3.2.6-1.mga10