Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:03378-1

Опубликовано: 26 сент. 2025
Источник: suse-cvrf

Описание

Security update for luajit

This update for luajit fixes the following issues:

  • CVE-2024-25176: Fixed stack-buffer-overflow in lj_strfmt_wfnum in lj_strfmt_num.c (bsc#1246077)
  • CVE-2024-25177: Fixed unsinking of IR_FSTORE for NULL metatable (bsc#1246078)
  • CVE-2024-25178: Fixed out-of-bounds read in the stack-overflow handler in lj_state.c (bsc#1246079)

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15 SP6
libluajit-5_1-2-2.1.0~beta3+git.1624618403.e9577376-150400.4.5.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
libluajit-5_1-2-2.1.0~beta3+git.1624618403.e9577376-150400.4.5.1
SUSE Linux Enterprise Module for Package Hub 15 SP6
libluajit-5_1-2-2.1.0~beta3+git.1624618403.e9577376-150400.4.5.1
luajit-2.1.0~beta3+git.1624618403.e9577376-150400.4.5.1
SUSE Linux Enterprise Module for Package Hub 15 SP7
libluajit-5_1-2-2.1.0~beta3+git.1624618403.e9577376-150400.4.5.1
luajit-2.1.0~beta3+git.1624618403.e9577376-150400.4.5.1
openSUSE Leap 15.6
libluajit-5_1-2-2.1.0~beta3+git.1624618403.e9577376-150400.4.5.1
libluajit-5_1-2-32bit-2.1.0~beta3+git.1624618403.e9577376-150400.4.5.1
luajit-2.1.0~beta3+git.1624618403.e9577376-150400.4.5.1
luajit-devel-2.1.0~beta3+git.1624618403.e9577376-150400.4.5.1

Ссылки

Описание

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240626 have a stack-buffer-overflow in lj_strfmt_wfnum in lj_strfmt_num.c.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP6:libluajit-5_1-2-2.1.0~beta3+git.1624618403.e9577376-150400.4.5.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:libluajit-5_1-2-2.1.0~beta3+git.1624618403.e9577376-150400.4.5.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:libluajit-5_1-2-2.1.0~beta3+git.1624618403.e9577376-150400.4.5.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:luajit-2.1.0~beta3+git.1624618403.e9577376-150400.4.5.1
Ссылки

Описание

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of Service (DoS).

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP6:libluajit-5_1-2-2.1.0~beta3+git.1624618403.e9577376-150400.4.5.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:libluajit-5_1-2-2.1.0~beta3+git.1624618403.e9577376-150400.4.5.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:libluajit-5_1-2-2.1.0~beta3+git.1624618403.e9577376-150400.4.5.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:luajit-2.1.0~beta3+git.1624618403.e9577376-150400.4.5.1
Ссылки

Описание

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in lj_state.c.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP6:libluajit-5_1-2-2.1.0~beta3+git.1624618403.e9577376-150400.4.5.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:libluajit-5_1-2-2.1.0~beta3+git.1624618403.e9577376-150400.4.5.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:libluajit-5_1-2-2.1.0~beta3+git.1624618403.e9577376-150400.4.5.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:luajit-2.1.0~beta3+git.1624618403.e9577376-150400.4.5.1
Ссылки
Уязвимость SUSE-SU-2025:03378-1