Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:02886-1

Опубликовано: 19 авг. 2025
Источник: suse-cvrf

Описание

Security update for lua51-luajit

This update for lua51-luajit fixes the following issues:

  • CVE-2024-25176: Fixed stack-buffer-overflow in lj_strfmt_wfnum in lj_strfmt_num.c (bsc#1246077)
  • CVE-2024-25177: Fixed unsinking of IR_FSTORE for NULL metatable (bsc#1246078)
  • CVE-2024-25178: Fixed ut-of-bounds read in the stack-overflow handler in lj_state.c (bsc#1246079)

Список пакетов

openSUSE Leap 15.6
lua51-luajit-2.1.0~beta2-150000.3.3.1
lua51-luajit-devel-2.1.0~beta2-150000.3.3.1

Ссылки

Описание

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240626 have a stack-buffer-overflow in lj_strfmt_wfnum in lj_strfmt_num.c.

Затронутые продукты
openSUSE Leap 15.6:lua51-luajit-2.1.0~beta2-150000.3.3.1
openSUSE Leap 15.6:lua51-luajit-devel-2.1.0~beta2-150000.3.3.1
Ссылки

Описание

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of Service (DoS).

Затронутые продукты
openSUSE Leap 15.6:lua51-luajit-2.1.0~beta2-150000.3.3.1
openSUSE Leap 15.6:lua51-luajit-devel-2.1.0~beta2-150000.3.3.1
Ссылки

Описание

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in lj_state.c.

Затронутые продукты
openSUSE Leap 15.6:lua51-luajit-2.1.0~beta2-150000.3.3.1
openSUSE Leap 15.6:lua51-luajit-devel-2.1.0~beta2-150000.3.3.1
Ссылки