FEDORA-2022-b9ed35a7ad — security update for lua

stable

lua-5.4.4-3.fc36

FEDORA-2022-b9ed35a7ad created by spot 2 years ago for Fedora 36

Update to the latest bugfixes (1-5) against 5.4.4. Includes fixes for CVE-2022-28805 and CVE-2022-33099.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2022-b9ed35a7ad

This update has been submitted for testing by spot.

2 years ago

This update's test gating status has been changed to 'waiting'.

2 years ago

This update's test gating status has been changed to 'passed'.

2 years ago

This update has been pushed to testing.

2 years ago

andilinux commented & provided feedback 2 years ago

karma

works

andilinux commented & provided feedback 2 years ago

karma

works

andilinux commented & provided feedback 2 years ago

karma

works

andilinux commented & provided feedback 2 years ago

karma

works

bojan commented & provided feedback 2 years ago

karma

Works.

This update can be pushed to stable now if the maintainer wishes

2 years ago

filiperosset commented & provided feedback 2 years ago

karma

no regressions noted

This update has been submitted for stable by bodhi.

2 years ago

mhayden commented & provided feedback 2 years ago

karma

No issues found

This update has been pushed to stable.

2 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

passed

Builds

lua-5.4.4-3.fc36

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

2 years ago

in testing

2 years ago

in stable

2 years ago

BZ#2073884 CVE-2022-28805 lua: heap buffer overread

BZ#2073889 CVE-2022-28805 lua: heap buffer overread [fedora-all]

BZ#2104427 CVE-2022-33099 lua: heap buffer overflow in luaG_errormsg() in ldebug.c due to uncontrolled recursion in error handling

BZ#2104743 CVE-2022-33099 lua: heap buffer overflow in luaG_errormsg() in ldebug.c due to uncontrolled recursion in error handling [fedora-all]

lua-5.4.4-3.fc36

Automated Test Results

passed