Advisories » MGASA-2026-0573

Updated minetest package fixes security vulnerabilities

Publication date: 04 Nov 2026
Modification date: 04 Nov 2026
Type: security
Affected Mageia releases : 10

Description

The client mesh loaders suffer from memory safety issues including
unbounded out-of-bounds heap writes and use-after-free, which might be
used to obtain arbitrary code execution on the client. (High)
Installing content from an untrusted ContentDB instance can result in
remote code execution. (Moderate)
Singleplayer: Lua sandbox escape from mod (Critical)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=36583
• https://github.com/luanti-org/luanti/security/advisories/GHSA-352v-4qmr-gmp7
• https://github.com/luanti-org/luanti/security/advisories/GHSA-j2v5-g52g-685j
• https://github.com/luanti-org/luanti/security/advisories/GHSA-5373-9cjp-qfmg

SRPMS

10/core

• minetest-5.18.0-1.1.mga10