Victoria II - Security Update - Version and Checksum unaltered

[BjornB]

Greetings!

To resolve a security issue tied to the way LUA libraries were loaded for mods we released a minor update. This update will not change your version number or cheksum, and save files should be unaffected.

Spoiler: Changelog

To prevent IO or system/OS access in Lua (to prevent mods abusing it), we want to disable the `luaopen_io` and `luaopen_os` functions in the LUA library/dll.
These are updated LUA libraries with that functionality disabled.

This does not change behavior of the base game, or impact the multiplayer checksum. Some mods might use these libraries for benign purposes, but unfortunately they will not function after this fix.

If you own the game through Steam or GoG, the update is already applied automatically.

Spoiler: Instructions for physical copies (not Steam or GoG)

- Download the .zip file here!
- Find file in zip
- Replace file in game installation directory

 

[Aardvark Bellay]

Greetings!

To resolve a security issue tied to the way LUA libraries were loaded for mods we released a minor update. This update will not change your version number or cheksum, and save files should be unaffected.

Thanks.
Glad that it became reality.

Shoudn't this get pinned ?

 

[RELee]

Cut out the spam. Be grateful that Paradox provided a security update for this poor old game.

 

[Gamer Dave]

Hello,
Just recently came back to play Vic II, read about the Security Update, and decided to patch the game but the zip file isn't loading, the download bar on chrome says:
"Failed - No file."

I'll appreciate any help with downloading Victoria-2-LUA-fix.zip

Thanks

 

[RELee]

I've raised a flag.

 

[Aardvark Bellay]

I've raised a flag.

Did they maybe think it would be obsolete because of the following may update, despite that not getting a manual download option ?

 

[Gamer Dave]

Thanks for replying,
I need the manual patch, all my victoria games (I+II) are on PC CD-ROM, yes, that old media.