tocsin

Debian/minetest: critical 9.8

Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta injection.

Action: Upgrade minetest to 5.4.1+repack-1 or later.

Affected

introducedfixedlast affected
05.4.1+repack-1-

Fixed versions

5.4.1+repack-1

Sources

published · modified · JSON