Lucene search

K
osvGoogleOSV:ALSA-2019:3706
HistoryNov 05, 2019 - 8:53 p.m.

Moderate: lua security and bug fix update

2019-11-0520:53:20
Google
osv.dev
12

EPSS

0.03

Percentile

90.9%

The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language.

Security Fix(es):

  • lua: use-after-free in lua_upvaluejoin in lapi.c resulting in denial of service (CVE-2019-6706)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.