Home / mailings

PDF

[USN-8732-1] Minetest vulnerability

Posted on 07 September 2026
Ubuntu Security

==========================================================================Ubuntu Security Notice USN-8732-1
September 07, 2026

minetest vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS

Summary:

Minetest could be made to crash or run programs if it received specially crafted
network traffic from an authenticated user.

Software Description:
- minetest: Free and open source infinite-world block sandbox game and a game engine

Details:

It was discovered that Minetest did not properly sanitize the Lua sandbox environment
when using LuaJIT. A malicious mod could escape the sandbox to execute arbitrary code
and gain full file system access on the server. An attacker could use this issue to
compromise the server.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
minetest-server 5.6.1+dfsg+~1.9.0mt8+dfsg-4ubuntu0.1~esm1
Available with Ubuntu Pro

Ubuntu 22.04 LTS
minetest-server 5.4.1+repack-2ubuntu0.1~esm1
Available with Ubuntu Pro

Ubuntu 20.04 LTS
minetest-server 5.1.1+repack-1ubuntu0.1~esm1
Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-8732-1
CVE-2026-41196

--===============7512637943509180266==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature

 

TOP