Fedora 29: FEDORA-2019-ee57bda7ae critical: lua Denial of Service

Lua is a powerful light-weight programming language designed for

extending applications. Lua is also frequently used as a

general-purpose, stand-alone language. Lua is free software.

Lua combines simple procedural syntax with powerful data description

constructs based on associative arrays and extensible semantics. Lua

is dynamically typed, interpreted from bytecodes, and has automatic

memory management with garbage collection, making it ideal for

configuration, scripting, and rapid prototyping.

Security fix for CVE-2019-6706.

* Mon Jan 28 2019 Tom Callaway - 5.3.5-3

- apply fix for CVE-2019-6706 (bz1670020)

[ 1 ] Bug #1670019 - CVE-2019-6706 lua: use-after-free in lua_upvaluejoin in lapi.c resulting in denial of service

https://bugzilla.redhat.com/show_bug.cgi?id=1670019

su -c 'dnf upgrade --advisory FEDORA-2019-ee57bda7ae' at the command

line. For more information, refer to the dnf documentation available at

http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/keys

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org