MGASA-2026-0185
- Source
- https://advisories.mageia.org/MGASA-2026-0185.html
- Import Source
- https://advisories.mageia.org/MGASA-2026-0185.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2026-0185
- Upstream
- Published
- 2026-06-10T00:39:41Z
- Modified
- 2026-06-10T00:45:06.632308665Z
- Summary
- Updated minetest packages fix security vulnerabilities
- Details
-
Mod security sandbox escape. (CVE-2026-40959) HTTP API and insecure environment access control bypass. (CVE-2026-40960)
- References
-
- https://advisories.mageia.org/MGASA-2026-0185.html
- https://bugs.mageia.org/show_bug.cgi?id=35422
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2K6QTVDXSL7E72EYONNHDCY7I7LTD27B/
- https://lists.debian.org/debian-security-announce/2026/msg00127.html
- https://github.com/luanti-org/luanti/security/advisories/GHSA-g596-mf82-w8c3
- https://github.com/luanti-org/luanti/security/advisories/GHSA-22c4-238c-m5j4
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:9 / minetest
Package
- Name
- minetest
- Purl
- pkg:rpm/mageia/minetest?arch=source&distro=mageia-9