shield Security update for lua53

SUSE-SLE-Module-Basesystem-15-SP2-2021-2196

This update for lua53 fixes the following issues: Update to version 5.3.6: - CVE-2020-24371: lgc.c mishandles the interaction between barriers and the sweep phase, leading to a memory access violation involving collectgarbage (bsc#1175449) - CVE-2020-24370: ldebug.c allows a negation overflow and segmentation fault in getlocal and setlocal (bsc#1175448) - Long brackets with a huge number of '=' overflow some internal buffer arithmetic.

• Release Date
  Jun 29 2021
• References
  Bugzilla: 1175449, 1175448
  CVEs: CVE-2020-24370, CVE-2020-24371
• Type
  security
• Severity
  moderate

cloud_download Downloads

Basesystem Module 15.2 s390x

• Packages
  liblua5_3-5
  The Lua integration library

  5.3.6-3.6.1 lock rpm

  lua53
  Small Embeddable Language with Procedural Syntax

  5.3.6-3.6.1 lock rpm lock src

  lua53-devel
  Development files for lua

  5.3.6-3.6.1 lock rpm

Basesystem Module 15.2 ppc64le

• Packages
  liblua5_3-5
  The Lua integration library

  5.3.6-3.6.1 lock rpm

  lua53
  Small Embeddable Language with Procedural Syntax

  5.3.6-3.6.1 lock rpm lock src

  lua53-devel
  Development files for lua

  5.3.6-3.6.1 lock rpm

Basesystem Module 15.2 aarch64

• Packages
  liblua5_3-5
  The Lua integration library

  5.3.6-3.6.1 lock rpm

  lua53
  Small Embeddable Language with Procedural Syntax

  5.3.6-3.6.1 lock rpm lock src

  lua53-devel
  Development files for lua

  5.3.6-3.6.1 lock rpm

Basesystem Module 15.2 x86_64

• Packages
  liblua5_3-5
  The Lua integration library

  5.3.6-3.6.1 lock rpm

  liblua5_3-5-32bit
  The Lua integration library

  5.3.6-3.6.1 lock rpm

  lua53
  Small Embeddable Language with Procedural Syntax

  5.3.6-3.6.1 lock rpm lock src

  lua53-devel
  Development files for lua

  5.3.6-3.6.1 lock rpm