FEDORA-2022-473560d1a6 — security update for lua

stable

lua-5.4.4-1.fc34

FEDORA-2022-473560d1a6 created by spot a year ago for Fedora 34

Update to lua 5.4.4, 5.3.6. Note that while this fixes CVE-2021-43519, it was also fixed in 5.4.3-4.

Fix CVE-2021-44647 (and other known upstream bugs)

How to install

sudo dnf upgrade --refresh --advisory=FEDORA-2022-473560d1a6

This update has been submitted for testing by spot.

a year ago

This update's test gating status has been changed to 'waiting'.

a year ago

This update has obsoleted lua-5.4.3-4.fc34, and has inherited its bugs and notes.

a year ago

This update's test gating status has been changed to 'passed'.

a year ago

This update has been pushed to testing.

a year ago

This update has been submitted for stable by bodhi.

a year ago

This update has been pushed to stable.

a year ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

passed

Builds

lua-5.4.4-1.fc34

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

a year ago

in testing

a year ago

in stable

a year ago

BZ#2044415 CVE-2021-44647 lua: type confusion in funcnamefromcode in ldebug.c could result in local DoS

BZ#2044416 CVE-2021-44647 lua: type confusion in funcnamefromcode in ldebug.c could result in local DoS [fedora-all]

BZ#2047672 CVE-2021-43519 lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file

BZ#2047673 CVE-2021-43519 lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file [fedora-all]

lua-5.4.4-1.fc34

Automated Test Results

passed