openSUSE-SU-2021:2196-1

Опубликовано: 10 июл. 2021

Источник: suse-cvrf

Описание

Security update for lua53

This update for lua53 fixes the following issues:

Update to version 5.3.6:

CVE-2020-24371: lgc.c mishandles the interaction between barriers and the sweep phase, leading to a memory access violation involving collectgarbage (bsc#1175449)
CVE-2020-24370: ldebug.c allows a negation overflow and segmentation fault in getlocal and setlocal (bsc#1175448)
Long brackets with a huge number of '=' overflow some internal buffer arithmetic.

liblua5_3-5-5.3.6-3.6.1

liblua5_3-5-32bit-5.3.6-3.6.1

lua53-5.3.6-3.6.1

lua53-devel-5.3.6-3.6.1

lua53-doc-5.3.6-3.6.1

ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal(3,2^31).

openSUSE Leap 15.3:liblua5_3-5-32bit-5.3.6-3.6.1

openSUSE Leap 15.3:liblua5_3-5-5.3.6-3.6.1

openSUSE Leap 15.3:lua53-5.3.6-3.6.1

openSUSE Leap 15.3:lua53-devel-5.3.6-3.6.1

lgc.c in Lua 5.4.0 mishandles the interaction between barriers and the sweep phase, leading to a memory access violation involving collectgarbage.

openSUSE Leap 15.3:liblua5_3-5-32bit-5.3.6-3.6.1

openSUSE Leap 15.3:liblua5_3-5-5.3.6-3.6.1

openSUSE Leap 15.3:lua53-5.3.6-3.6.1

openSUSE Leap 15.3:lua53-devel-5.3.6-3.6.1