An issue was discovered in savestruct_internal.c in FreedroidRPG 1.0rc2. Saved game files are composed of Lua scripts that recover a game's state. A file can be modified to put any Lua code inside, leading to arbitrary code execution while loading. References: https://bugs.freedroid.org/b/issue953 https://logicaltrust.net/blog/2020/02/freedroid.html
Created freedroidrpg tracking bugs for this issue: Affects: fedora-all [bug 1854748]
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.