Red Hat Security AdvisoryRHSA-2023:1211
lua security update
Released 2023-03-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.0) lua-5.4.4-1.el9_0.1, lua-devel-5.4.4-1.el9_0.1
- Red Hat Enterprise Linux AppStream EUS (v.9.0) lua-5.4.4-1.el9_0.1
- Red Hat Enterprise Linux BaseOS EUS (v.9.0) lua-5.4.4-1.el9_0.1, lua-libs-5.4.4-1.el9_0.1
Fixes 2 records
Priority LOW 30
Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.
CVSS 3.1MEDIUM 6.3· Local · No auth · User interaction · EPSS 0.00985 · Published 2022-03-14 · Fixed CWE-416
Priority LOW 27
Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01227 · Published 2021-11-09 · Partial fix CWE-674
