FEDORA-2022-473560d1a6 — security update for lua

stable

lua-5.4.4-1.fc34

FEDORA-2022-473560d1a6 created by spot 3 years ago for Fedora 34

Update to lua 5.4.4, 5.3.6. Note that while this fixes CVE-2021-43519, it was also fixed in 5.4.3-4.

Fix CVE-2021-44647 (and other known upstream bugs)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2022-473560d1a6

This update has been submitted for testing by spot.

3 years ago

This update's test gating status has been changed to 'waiting'.

3 years ago

This update has obsoleted lua-5.4.3-4.fc34, and has inherited its bugs and notes.

3 years ago

This update's test gating status has been changed to 'passed'.

3 years ago

This update has been pushed to testing.

3 years ago

This update has been submitted for stable by bodhi.

3 years ago

This update has been pushed to stable.

3 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

3 years ago

in testing

3 years ago

in stable

3 years ago

Builds

lua-5.4.4-1.fc34

BZ#2044415 CVE-2021-44647 lua: type confusion in funcnamefromcode in ldebug.c could result in local DoS

BZ#2044416 CVE-2021-44647 lua: type confusion in funcnamefromcode in ldebug.c could result in local DoS [fedora-all]

BZ#2047672 CVE-2021-43519 lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file

BZ#2047673 CVE-2021-43519 lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file [fedora-all]

lua-5.4.4-1.fc34

Automated Test Results

passed