Low ELSA-2023-2582 1 CVE

Low: lua security update (Oracle Linux 9)

Published May 15, 2023 · Updated May 15, 2023

Ecosystem: Oracle Linux

Summary

[5.4.4-3]
- Apply upstream patch for CVE-2022-28805

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 9	lua	0:5.4.4-3.el9
Oracle Linux · 9	lua-devel	0:5.4.4-3.el9
Oracle Linux · 9	lua-libs	0:5.4.4-3.el9

Vulnerabilities 1

Unscored —

CVE-2022-28805

singlevar in lparser.c in Lua from (including) 5.4.0 up to (excluding) 5.4.4 lacks a certain luaK_exp2anyregup call, le…

ntopng lua5.4 lua lua5.4 Debian Ubuntu Azure Linux Alpine

Apr 8, 2022