[Bug 217911] games/ioquake3 remote dll loading security issues

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217911

            Bug ID: 217911
           Summary: games/ioquake3 remote dll loading security issues
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: Individual Port(s)
          Assignee: kami at freebsd.org
          Reporter: darkfiberiru at gmail.com
             Flags: maintainer-feedback?(kami at freebsd.org)
          Assignee: kami at freebsd.org

http://ioquake3.org/2017/03/13/important-security-update-please-update-ioquake3-immediately/

Looks like ioquake3 had a bug where pk3 files from remote servers could get
loaded as libraries... 

This could mean un-elevated Remote code execution

Commit where it is fixed.
https://github.com/ioquake/ioq3/commit/376267d534476a875d8b9228149c4ee18b74a4fd

-- 
You are receiving this mail because:
You are the assignee for the bug.