Steve Sakoman abd7cf838d lua: fix CVE-2022-28805 ...

singlevar in lparser.c in Lua through 5.4.4 lacks a certain luaK_exp2anyregup
call, leading to a heap-based buffer over-read that might affect a system that
compiles untrusted Lua code.

https://nvd.nist.gov/vuln/detail/CVE-2022-28805

(From OE-Core rev: d2ba3b8850d461bc7b773240cdf15b22b31a3f9e)

Signed-off-by: Sana Kazi <sana.kazi@kpit.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 91e14d3a8e6e67267047473f5c449f266b44f354)
Signed-off-by: Omkar Patil <omkar.patil@kpit.com>
Signed-off-by: Omkar Patil <omkarpatil10.93@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>

2022-05-25 19:34:39 -07:00

..

0001-Allow-building-lua-without-readline-on-Linux.patch

lua: change a hard readline dependency into an optional one

2019-10-10 21:58:10 -07:00

0001-Fixed-bug-barriers-cannot-be-active-during-sweep.patch

lua: fix CVE-2020-24371

2021-01-12 15:06:01 -08:00

0001-lua-fix-CVE-2022-28805.patch

lua: fix CVE-2022-28805

2022-05-25 19:34:39 -07:00

CVE-2020-15888.patch

lua: Security Advisory - lua - CVE-2020-15888

2020-07-30 21:29:08 -07:00

CVE-2020-15945.patch

lua: fix CVE-2020-15945

2021-01-12 15:06:01 -08:00

CVE-2022-28805.patch

lua: fix CVE-2022-28805

2022-05-25 19:34:39 -07:00

lua.pc.in

lua: update Libs in lua.pc

2016-02-25 17:45:47 +01:00

run-ptest

lua: Added ptest for lua

2016-02-15 10:15:27 +01:00

uclibc-pthread.patch

lua: add lua 5.2 recipe

2013-12-21 19:16:51 +01:00