Vulnerability Bulletins

DSA-3812 ioquake3 - security update

   
Affected software Debian
 
It was discovered that ioquake3, a modified version of the ioQuake3 gameengine performs insufficent restrictions on automatically downloadedcontent (pk3 files or game code), which allows malicious game servers tomodify configuration settings including driver settings.

More info:

https://www.debian.org/security/2017/dsa-3812