ALT-PU-2025-5969: package godot update to version 3.6-alt1
Описание
This update upgrades godot to version 3.6-alt1.
Устраненные уязвимости3
Связанные уязвимости
In Godot through 3.1, remote code execution is possible due to the deserialization policy not being applied correctly.
In Godot through 3.1, remote code execution is possible due to the deserialization policy not being applied correctly.
In Godot through 3.1, remote code execution is possible due to the des ...
In Godot through 3.1, remote code execution is possible due to the deserialization policy not being applied correctly.
A stack overflow issue exists in Godot Engine up to v3.2 and is caused by improper boundary checks when loading .TGA image files. Depending on the context of the application, attack vector can be local or remote, and can lead to code execution and/or system crash.