Debian has issued an advisory on August 19:
Mageia 5 and Mageia 6 are also affected.
We won't be fixing this for Mageia 5.
MGA6TOO, MGA5TOO =>
Updated package uploaded for cauldron and Mageia 6.
Updated ioquake3 package fixes security vulnerability:
It was discovered that ioquake3 contained a read buffer overflow that allows remote attackers to cause a denial of service (CVE-2017-11721).
Updated packages in core/updates_testing:
What is it?
"Quake 3 Arena engine (ioquake3 version)
This package contains the enhanced opensource ioquake3 version of the Quake 3
Arena engine. This engine can be used to play a number of games based on this
This looks useful: ioquake3-demo
"This package installs an application menu entry for playing the Quake3 Arena
demo. The first time you click this menu entry, it will offer to download and
install the Quake 3 demo datafiles for you."
BEFORE update: installed:
and tried from the Games menu ioquake3; not successful (same from terminal, as both normal user and root): popped up a window saying:
"pak0.pk3" is missing. Please copy it from your legitimate Q3 CDROM. Point Release files are missing. Please re-install the 1.32 point release. Also check that your ioq3 executable is in the correct place and that every file in the "baseq3" directory is present and readable. See "/home/lewis/.q3a/baseq3/crashlog.txt" for details."
The log file says:
"ioq3 1.36 (git 20170428) [Mageia 12.20170428.1.mga6] linux-x86_64 May 9 2017
SSE instruction set enabled
----- FS_Startup -----
We are looking in the current search path:
0 files in pk3 files
"pak0.pk3" is missing. Please copy it from your legitimate Q3 CDROM. Point Release files are missing. Please re-install the 1.32 point release. Also check that your ioq3 executable is in the correct place and that every file in the "baseq3" directory is present and readable
The first path cited above contains just the log file.
$ ls -lR /home/lewis/.q3a/baseq3
-rw-r----- 1 lewis lewis 545 Ion 14 19:08 crashlog.txt
For the second path:
$ ls -l /usr/libexec/ioquake3/baseq3
-rwxr-xr-x 1 root root 296984 Mai 9 2017 cgamex86_64.so*
-rwxr-xr-x 1 root root 488528 Mai 9 2017 qagamex86_64.so*
-rwxr-xr-x 1 root root 283720 Mai 9 2017 uix86_64.so*
Not a good basis for testing the update, which has nothing to do with all this.
Asking for feedback.
First off, I don't really know the answer to this with any certainty as I've never played the game before. That said, it appears the specified file is not bundled with ioquake3 (AFAICS, it does not exist anywhere in the ioquake3 package source) and must be obtained from some other official source.
For mageia, urpmf says that might include the openarena and/or openarena-data packages. If you don't have the CDROM it is asking for I'd suggest installing one of those packages and then copy or synlink the file from the package you choose to one of the locations in the 'current search path' mentioned in the error message (I used /usr/libexec/ioquake3/baseq3) and then see what happens.
But, having tried this, you will then probably see a message that point release files are missing. You can get these from https://ioquake3.org/extras/patch-data/ and the unzip and copy the files in baseq3 and missionpack to the search path locations like the previous pak0 file.
When I did this I was asked for a CD key which I do not possess. But at least the program started without error.
This is the all I can think of to suggest. If this does not work we may have to wait until Remi (ioquake3 maintainer) or someone else more familiar with quake3 comes along with the real answer.
I will add that running ioquake3-demo from CLI after all of the above does yield more fruitful results for me.
Ask if I didn't make something clear. If I can still remember what I did I'll try again. :)
All the research you have done on this is truly impressive. I think in summary:
1) pak0.pk3. Install openarena and/or openarena-data pkgs and find in those the file; copy it to
2) Point Release files. You can get these from
and then unzip and copy the files in baseq3 and missionpack to
3) When launching the program you are asked for a CD key which you do not possess. But at least the program starts without error.
4) Running ioquake3-demo from CLI after all of the above does yield more fruitful results.
Before launching QA into all this, I cannot but remark "How can Mageia (or any distribution) offer packages requiring so much external fiddling for them to work?"
I think this needs feedback from probably Rémi before we bash on. If these extra-Mageia manipulations are expected and normal, they must be included in /usr/share/doc/ioquake3/
README.md is a long very technical document.
md4-readme.txt is also technical.
opengl2-readme.md is a long very technical document.
vvoip-readme.txt is also technical.
None of these (I think) cover the points you have clarified.
But thank you again Mike for beating such a tortuous path.
See Bug 6997.