-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 13 Feb 2022 21:46:40 CET
Source: minetest
Architecture: source
Version: 0.4.17.1+repack-1+deb10u1
Distribution: buster-security
Urgency: high
Maintainer: Debian Games Team <pkg-games-devel@lists.alioth.debian.org> Changed-By: Markus Koschany <apo@debian.org>
Checksums-Sha1:
337b04d0d14f3626a9b4e1b4c6def3a53241881e 2746 minetest_0.4.17.1+repack-1+deb10u1.dsc
946d26b0ef0e97759eec4516dbf29349f3e50265 8930830 minetest_0.4.17.1+repack.orig.tar.gz
bf4b4f6a81a70c37425c076c072c7be5fa0b0d7e 38496 minetest_0.4.17.1+repack-1+deb10u1.debian.tar.xz
edccf5da8de3d1eafd1a44d7574dcfa38b57ff93 13214 minetest_0.4.17.1+repack-1+deb10u1_amd64.buildinfo
Checksums-Sha256:
a99309b7e51f91499de981b2f2bb33e4aabb81d64196babdc1275454c4c7bcee 2746 minetest_0.4.17.1+repack-1+deb10u1.dsc
d77c483e983b764056a1edc507933dfc9aa2c95b24daba14b45ff3ad5153d6c6 8930830 minetest_0.4.17.1+repack.orig.tar.gz
eb0ce463e94cbe2e97ab284d5c53cb34003061452b873e35115a26f666df0b41 38496 minetest_0.4.17.1+repack-1+deb10u1.debian.tar.xz
a30995ba016acf46f495817eb310e0281b2129bffa9122cecabcb67383dcbfeb 13214 minetest_0.4.17.1+repack-1+deb10u1_amd64.buildinfo
Closes: 1004223
Changes:
minetest (0.4.17.1+repack-1+deb10u1) buster-security; urgency=high
.
* Fix CVE-2022-24300 and CVE-2022-24301:
Several vulnerabilities have been discovered in Minetest. These issues may
allow attackers to manipulate game mods and grant them an unfair advantage
over other players. These flaws could also be abused for a denial of
service attack or if user input is passed directly to minetest.deserialize
without serializing it first, then a malicious user could run Lua code in
the server environment. (Closes: #1004223)
Files:
324f5712864c65077b7fd1304e05eef2 2746 games optional minetest_0.4.17.1+repack-1+deb10u1.dsc
7681cd511b845020cdd584214c0377e6 8930830 games optional minetest_0.4.17.1+repack.orig.tar.gz
b26b932e3cf584fc6ad14b5e25fd15fb 38496 games optional minetest_0.4.17.1+repack-1+deb10u1.debian.tar.xz
4478bd2c7c1773ed2207128c3b222e9a 13214 games optional minetest_0.4.17.1+repack-1+deb10u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAmIJbv9fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1HkJ+YQAKnCDNw9Lpl4LFVtRFHSMLoA5JupcHaLSWDi RnygE5R1OBwIxZ3Sta7qYdgs0P/BLwa3l0aC3wIFUinCwi7Q2iEaxzTTVioLgcR+ Z/P5UmhCdDqTAzh+2vKmJoRBX7HTPRCyLh7EoDowhZjLi9MrF5TQBJ/p4lDxioaX s6WZ1vX4+d1IdtCaQq6KBZuJ5UNsxiIIwffShC+nZO/jAAdSvCsaymQX29YJVN/j VKJ9wvjXKMgO9dIAR76HQTO0o/mcocd1pO2Gwpl9UfEW99YCxplBYElnpyX8IY7U icRg6/OzHCAlGvPyLZzsuFz9Ou7aTsaHi0tw+SQwP3LMtM1ugvdK5k0xrz7spQUF BW3aU12cWDxdVQAGQ1+W1ZuA+s0IgcZvK1xrc+HncGPIYUbUg3u5Dfyv05WdEjvo zGhMszb4JBNBnA1w6PA237ZqgviQB0Yb/Euuh9TyeeoSldk0v4+PHHsuXQnHjIt1 1rrOu3FlgJ4jtr+bX22FzBsTlprtJyde1Nk5BFsO07ur+Hebbp8smIwb7CZRuGV7 sJdGjvCXlDU+eLbUjgo5ah2TX2uxwSBtuiUQH6Svc3Vgi2Pnfeynt/DB1OaEg4et WciMrf+oDpmWFcMGBrqzBtppuwHZ+3WOjRmNNzzFs8msjltNUbpnj1Ga3Nw2yM0B
97eOzI9h
=Zu1+
-----END PGP SIGNATURE-----

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)