{"id":"MGASA-2023-0005","summary":"Updated minetest packages fix security vulnerability","details":"This update provides minetest 5.6.1, the latest stable release of the open\nsource voxel game. This updates provides a number of feature and bug fix\nchanges compared to the previous version 5.4.0 provided in Mageia 8. See\nthe linked release notes and changelogs for details.\n\nThe update also improves compatibility with hosted game servers, which\ntypically run and expect the latest stable release.\n\nThe update also fixes a security vulnerability affecting single player\nwith malicious mods (GHSA-663q-pcjw-27cc)\n\nIn single player, a mod could set a global setting that controls the Lua\nscript loaded to display the main menu. The script would be loaded as soon\nas the game session is exited. The Lua environment the menu runs in was\nnot sandboxed and could directly  interfere with the user's system.\n(CVE-2022-35978)\n","modified":"2026-04-16T04:43:13.512983383Z","published":"2023-01-13T17:37:09Z","upstream":["CVE-2022-35978"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2023-0005.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=31363"},{"type":"WEB","url":"https://blog.minetest.net/2022/08/04/5.6.0-released/"},{"type":"WEB","url":"https://dev.minetest.net/Changelog#5.4.0_.E2.86.92_5.5.0"},{"type":"WEB","url":"https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.6.0"},{"type":"WEB","url":"https://dev.minetest.net/Changelog#5.6.0_.E2.86.92_5.6.1"},{"type":"ADVISORY","url":"https://github.com/minetest/minetest/security/advisories/GHSA-663q-pcjw-27cc"}],"affected":[{"package":{"name":"minetest","ecosystem":"Mageia:8","purl":"pkg:rpm/mageia/minetest?arch=source&distro=mageia-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.1-1.mga8"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2023-0005.json"}}],"schema_version":"1.7.5","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}