Medium ELSA-2023-0957 2 CVEs

Moderate: lua security update (Oracle Linux 9)

Published Feb 28, 2023 · Updated Feb 28, 2023

Ecosystem: Oracle Linux

Summary

[5.4.4-2]
- Resolves CVE-2021-43519

[5.4.4-1]
- Rebase to lua 5.4.4
- Resolves CVE-2021-44964

[5.4.2-7]
- Fix up CVE-2022-33099 patch

[5.4.2-6]
- Enable gating

[5.4.2-5]
- apply upstream fix for CVE-2022-33099

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 9	lua	0:5.4.4-2.el9_1
Oracle Linux · 9	lua-devel	0:5.4.4-2.el9_1
Oracle Linux · 9	lua-libs	0:5.4.4-2.el9_1

Vulnerabilities 2

Unscored —

CVE-2021-43519

Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service vi…

darktable ceph ntopng emscripten Debian Ubuntu Azure Linux

Nov 9, 2021
Unscored —

CVE-2021-44964

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform S…

ntopng lua5.4 lua memcached Debian Ubuntu Azure Linux

Mar 14, 2022