MGASA-2020-0362

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2020-0362.html

Import Source

https://advisories.mageia.org/MGASA-2020-0362.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2020-0362

Related

CVE-2020-24370

Published

2020-09-04T09:16:18Z

Modified

2020-09-04T08:47:19Z

Summary

Updated lua and lua5.3 packages fix security vulnerability

Details

ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal(3,2^31). (CVE-2020-24370)

References

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:7 / lua

Package

Name: lua
Purl: pkg:rpm/mageia/lua?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.2.4-3.1.mga7

Ecosystem specific

{
    "section": "core"
}

Mageia:7 / lua5.3

Package

Name: lua5.3
Purl: pkg:rpm/mageia/lua5.3?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.3.5-2.1.mga7

Ecosystem specific

{
    "section": "core"
}