Red Hat Security AdvisoryRHSA-2021:4510
lua security update
Released 2021-11-09 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) lua-5.3.4-12.el8, lua-devel-5.3.4-12.el8
- Red Hat Enterprise Linux AppStream (v. 8) lua-5.3.4-12.el8
- Red Hat Enterprise Linux BaseOS (v. 8) lua-5.3.4-12.el8, lua-libs-5.3.4-12.el8
Fixes 1 record
Priority LOW 31
ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal(3,2^31).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03833 · Published 2020-08-17 · Fixed CWE-191