Alerts This Week
Warning Icon 1 541
Alerts This Week
Warning Icon 1 541

Mageia: 2020-0362 Moderate: Lua 5.3 Negation Overflow Advisory

mageia
Calendar Grey September 4, 2020
Dist Mageia Esm H88
Recent updates to the lua and lua5.3 packages in Mageia address a critical negation overflow vulnerability and segmentation fault issue, boosting system security
ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal(3,2^31)

Summary

ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal(3,2^31). (CVE-2020-24370)

References

- https://bugs.mageia.org/show_bug.cgi?id=27213

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/QXYMCIUNGK26VHAYHGP5LPW56G2KWOHQ/

- https://www.cve.org/CVERecord?id=CVE-2020-24370

Resolution

SRPMS

- 7/core/lua-5.2.4-3.1.mga7

- 7/core/lua5.3-5.3.5-2.1.mga7

Publication date: 04 Sep 2020
URL: https://advisories.mageia.org/MGASA-2020-0362.html
Type: security
CVE: CVE-2020-24370

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here