Alerts This Week
Warning Icon 1 626
Alerts This Week
Warning Icon 1 626

Warning: Undefined array key "Description" in /var/www/www.linuxsecurity.com-443/html/lsadvisories/lsadvisories.php on line 220

Fedora 41: luajit Important CVE-2024-25176 Buffer Overflow Advisory

fedora
Calendar Grey July 18, 2025
Dist Fedora Esm H88
A crucial update for Fedora has been released to fix the serious CVE-2024-25176 vulnerability in luajit, addressing critical buffer overflow issues
Fix CVE-2024-25176

Summary

LuaJIT implements the full set of language features defined by Lua 5.1.

The virtual machine (VM) is API- and ABI-compatible to the standard

Lua interpreter and can be deployed as a drop-in replacement.

Update Information:

Fix CVE-2024-25176

Change Log

* Tue Jul 8 2025 Andreas Schneider - 2.1.1748459687-1 - Update to version 2.1.1748459687 - Fixes CVE-2024-25176 - resolves: rhbz#2376988 * Tue Jul 8 2025 Andreas Schneider - 2.1.1744318430-1 - Update to version 2.1.1744318430 * Tue Jul 8 2025 Andreas Schneider - 2.1.1731485912-1 - Update to version 2.1.1731485912 - Fix bcsave assertion on s390x - resolves: rhbz#2323980 * Tue Jul 8 2025 Andreas Schneider - 2.1.1720049189-2 - Update to version 2.1.1724232689

References


[ 1 ] Bug #2376972 - CVE-2024-25178 luajit: Out of bounds read in LuaJIT [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2376972 [ 2 ] Bug #2376988 - CVE-2024-25176 luajit: From CVEorg collector [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2376988

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-4430674f97' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: luajit
Product: Fedora 41
Version: 2.1.1748459687
Release: 2.fc41
Summary: Just-In-Time Compiler for Lua

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here