Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2023:0001-1

Опубликовано: 03 янв. 2023
Источник: suse-cvrf

Описание

Security update for minetest

This update for minetest fixes the following issues:

Update to version 5.6.0

  • Fix CVE-2022-35978 ( boo#1202423 ): Mod scripts can escape sandbox in single player mode
  • name in game.conf is deprecated for the game title, use title instead
  • Add depth sorting for node faces
  • Various bug fixes
  • Full changes: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.6.0
  • Introduced mbranch-protection=none CXX flag to resolve boo#1193141 (aarch64).

Update to version 5.5.0 & 5.5.1:

  • Added hardening to systemd service(s) (boo#1181400).

  • Update to version 5.4.1:

    • This is a maintenance release based on 5.4.0, it contains bugfixes but no new features.
  • Update to version 5.4.0

    • Full log: https://dev.minetest.net/Changelog#5.3.0_.E2.86.92_5.4.0
    • Removed support for bumpmapping, generated normal maps and parallax occlusion
    • By default, the crosshair will now change to an 'X' when pointing to objects
    • Prevent players accessing inventories of other players
    • Prevent interacting with items out of the hotbar
    • Prevent players from being able to modify ItemStack meta
  • Update to version 5.3.0. (see https://dev.minetest.net/Changelog#5.2.0_.E2.86.92_5.3.0)

    • Formspec improvements, including a scrolling GUI element
    • Performance improvements to the Server and API
    • Many bug fixes and small features
  • Now requires desktop-file-utils version >= 0.25.

Список пакетов

SUSE Package Hub 15 SP3
minetest-5.6.0-bp154.2.3.5
minetest-data-5.6.0-bp154.2.3.5
minetest-lang-5.6.0-bp154.2.3.5
minetestserver-5.6.0-bp154.2.3.5
SUSE Package Hub 15 SP4
minetest-5.6.0-bp154.2.3.5
minetest-data-5.6.0-bp154.2.3.5
minetest-lang-5.6.0-bp154.2.3.5
minetestserver-5.6.0-bp154.2.3.5
openSUSE Leap 15.3
minetest-5.6.0-bp154.2.3.5
minetest-data-5.6.0-bp154.2.3.5
minetest-lang-5.6.0-bp154.2.3.5
minetestserver-5.6.0-bp154.2.3.5
openSUSE Leap 15.4
minetest-5.6.0-bp154.2.3.5
minetest-data-5.6.0-bp154.2.3.5
minetest-lang-5.6.0-bp154.2.3.5
minetestserver-5.6.0-bp154.2.3.5

Описание

Minetest is a free open-source voxel game engine with easy modding and game creation. In **single player**, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs in is not sandboxed and can directly interfere with the user's system. There are currently no known workarounds.


Затронутые продукты
SUSE Package Hub 15 SP3:minetest-5.6.0-bp154.2.3.5
SUSE Package Hub 15 SP3:minetest-data-5.6.0-bp154.2.3.5
SUSE Package Hub 15 SP3:minetest-lang-5.6.0-bp154.2.3.5
SUSE Package Hub 15 SP3:minetestserver-5.6.0-bp154.2.3.5

Ссылки