File _patchinfo of Package patchinfo.17628
<patchinfo incident="17628">
<issue tracker="cve" id="2022-35978"/>
<issue tracker="bnc" id="1181400">AUDIT-TASK: Evaluate systemd hardenings and get more services to use them</issue>
<issue tracker="bnc" id="1193141">minetestserver terminates with SIGSEGV at startup</issue>
<issue tracker="bnc" id="1202423">VUL-0: CVE-2022-35978: minetest: Mod scripts can escape sandbox in single player</issue>
<packager>susnux</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for minetest</summary>
<description>This update for minetest fixes the following issues:
Update to version 5.6.0
* Fix CVE-2022-35978 ( boo#1202423 ): Mod scripts can escape sandbox in single player mode
* `name` in game.conf is deprecated for the game title, use `title` instead
* Add depth sorting for node faces
* Various bug fixes
* Full changes: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.6.0
- Introduced mbranch-protection=none CXX flag to resolve boo#1193141
(aarch64).
Update to version 5.5.0 & 5.5.1:
* Full log for version 5.5.0: https://dev.minetest.net/Changelog#5.4.0_.E2.86.92_5.5.0
* This release switches from Irrlicht to our own fork called IrrlichtMt.
* Full log for version 5.5.1: https://dev.minetest.net/Changelog#5.5.0_.E2.86.92_5.5.1
* This is a maintenance release based on 5.5.0, it contains bugfixes but no new features.
- Added hardening to systemd service(s) (boo#1181400).
- Update to version 5.4.1:
* This is a maintenance release based on 5.4.0,
it contains bugfixes but no new features.
- Update to version 5.4.0
* Full log: https://dev.minetest.net/Changelog#5.3.0_.E2.86.92_5.4.0
* Removed support for bumpmapping, generated normal maps
and parallax occlusion
* By default, the crosshair will now change to an "X" when
pointing to objects
* Prevent players accessing inventories of other players
* Prevent interacting with items out of the hotbar
* Prevent players from being able to modify ItemStack meta
- Update to version 5.3.0.
(see https://dev.minetest.net/Changelog#5.2.0_.E2.86.92_5.3.0)
* Formspec improvements, including a scrolling GUI element
* Performance improvements to the Server and API
* Many bug fixes and small features
- Now requires desktop-file-utils version >= 0.25.
</description>
</patchinfo>