tocsin

Debian/crawl: critical 9.8

Dungeon Crawl Stone Soup (aka DCSS or crawl) before 0.25 allows remote attackers to execute arbitrary code via Lua bytecode embedded in an uploaded .crawlrc file.

Action: Upgrade crawl to 2:0.25.0-1 or later.

Affected

introducedfixedlast affected
02:0.25.0-1-

Fixed versions

2:0.25.0-1

Sources

published · modified · JSON