Bug#696306: freeciv: CVE-2012-5645

[Jacob Nevins]

Moritz Muehlenhoff:
> Freeciv maintainers,
> it's been two months. Can you please upload a fixed package?

For the avoidance of doubt (sorry if you knew this):

No-one you've emailed directly is a Debian maintainer (Marko is
upstream).

We (upstream) made a new release fixing both CVE-2012-5645 and
CVE-2012-6083 on 8th Dec (2.3.3). Since then we've made another release
(2.3.4 on 16th Feb). See #699296 where I request that Debian take these
updates into at least unstable.