[Bug 2064772] New: CVE-2021-44964 lua: use after free allows Sandbox Escape
by bugzilla＠redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2064772
Bug ID: 2064772
Summary: CVE-2021-44964 lua: use after free allows Sandbox
Escape
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: high
Priority: high
Assignee: security-response-team(a)redhat.com
Reporter: pdelbell(a)redhat.com
CC: 4le(a)live.com, caswilli(a)redhat.com,
csutherl(a)redhat.com, drjohnson1(a)gmail.com,
fedora(a)famillecollet.com, fjansen(a)redhat.com,
gzaronik(a)redhat.com, hdegoede(a)redhat.com,
jburrell(a)redhat.com, jclere(a)redhat.com,
jwon(a)redhat.com, kaycoth(a)redhat.com,
krathod(a)redhat.com,
lua-packagers-sig(a)lists.fedoraproject.org,
mhroncok(a)redhat.com, michel(a)michel-slm.name,
moceap(a)hotmail.com, mschmidt(a)redhat.com,
mturk(a)redhat.com, packaging-team-maint(a)redhat.com,
pjindal(a)redhat.com, rob.myers(a)gtri.gatech.edu,
spotrh(a)gmail.com, szappis(a)redhat.com
Target Milestone: ---
Classification: Other
Use after free in garbage collector and finalizer of lgc.c in Lua interpreter
5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script
file.
References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-44964
https://github.com/Lua-Project/lua-5.4.4-sandbox-escape-with-new-vulnerab...
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44964
http://lua-users.org/lists/lua-l/2021-12/msg00007.html
http://lua-users.org/lists/lua-l/2021-12/msg00015.html
http://lua-users.org/lists/lua-l/2021-12/msg00030.html
http://lua-users.org/lists/lua-l/2021-11/msg00186.html
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2064772
4 months, 3 weeks
[Bug 2047672] New: CVE-2021-43519 lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file
by bugzilla＠redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2047672
Bug ID: 2047672
Summary: CVE-2021-43519 lua: stack overflow in lua_resume of
ldo.c allows a DoS via a crafted script file
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: mrehak(a)redhat.com
CC: 4le(a)live.com, bdettelb(a)redhat.com,
caswilli(a)redhat.com, csutherl(a)redhat.com,
drjohnson1(a)gmail.com, fjansen(a)redhat.com,
gzaronik(a)redhat.com, jburrell(a)redhat.com,
jclere(a)redhat.com, jwon(a)redhat.com,
kaycoth(a)redhat.com, krathod(a)redhat.com,
lua-packagers-sig(a)lists.fedoraproject.org,
mhroncok(a)redhat.com, michel(a)michel-slm.name,
mturk(a)redhat.com, packaging-team-maint(a)redhat.com,
pjindal(a)redhat.com, rob.myers(a)gtri.gatech.edu,
spotrh(a)gmail.com, szappis(a)redhat.com,
tkasparek(a)redhat.com
Target Milestone: ---
Classification: Other
Stack overflow in lua_resume of ldo.c in Lua Interpreter allows attackers to
perform a Denial of Service via a crafted script file.
Reference:
http://lua-users.org/lists/lua-l/2021-11/msg00015.html
http://lua-users.org/lists/lua-l/2021-10/msg00123.html
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2047672
6 months, 2 weeks
[Bug 2111138] New: luac: free(): double free detected in tcache 2
by bugzilla＠redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2111138
Bug ID: 2111138
Summary: luac: free(): double free detected in tcache 2
Product: Fedora
Version: 36
Status: NEW
Component: lua
Assignee: spotrh(a)gmail.com
Reporter: cra(a)fea.st
QA Contact: extras-qa(a)fedoraproject.org
CC: 4le(a)live.com, drjohnson1(a)gmail.com,
lua-packagers-sig(a)lists.fedoraproject.org,
mhroncok(a)redhat.com, michel(a)michel-slm.name,
rob.myers(a)gtri.gatech.edu, spotrh(a)gmail.com
Target Milestone: ---
Classification: Fedora
Created attachment 1899463
--> https://bugzilla.redhat.com/attachment.cgi?id=1899463&action=edit
proposed fix for luac double free
Description of problem:
luac crashes with a double free when building lsyncd on f36 on armv7hl.
Strangely, it builds fine on f37 and on other f36 arches.
Version-Release number of selected component (if applicable):
lua-5.4.4-1.fc36
How reproducible:
always
Steps to Reproduce:
1. fedpkg clone lsyncd
2. fedpkg switch-branch f36
3. fedpkg scratch-build
Actual results:
https://koji.fedoraproject.org/koji/taskinfo?taskID=90077485
Building target platforms: armv7hl
Building for target armv7hl
...
gmake[2]: Entering directory
'/builddir/build/BUILD/lsyncd-2.3.0/redhat-linux-build'
/usr/bin/cmake -E create_symlink /builddir/build/BUILD/lsyncd-2.3.0/tests tests
Compiling built-in runner
Compiling built-in default configs
/usr/bin/luac -o defaults.out /builddir/build/BUILD/lsyncd-2.3.0/default.lua
/builddir/build/BUILD/lsyncd-2.3.0/default-rsync.lua
/builddir/build/BUILD/lsyncd-2.3.0/default-rsyncssh.lua
/builddir/build/BUILD/lsyncd-2.3.0/default-direct.lua
/usr/bin/luac -o runner.out /builddir/build/BUILD/lsyncd-2.3.0/lsyncd.lua
free(): double free detected in tcache 2
gmake[2]: Leaving directory
'/builddir/build/BUILD/lsyncd-2.3.0/redhat-linux-build'
[ 22%] Built target prepare_tests
[ 33%] Generating runner.c
/usr/bin/cmake -E echo Generating\ built-in\ runner\ linkable
Generating built-in runner linkable
/usr/bin/lua /builddir/build/BUILD/lsyncd-2.3.0/bin2carray.lua runner.out
runner runner.c
gmake[2]: *** [CMakeFiles/lsyncd.dir/build.make:96: defaults.out] Aborted (core
dumped)
gmake[2]: *** Deleting file 'defaults.out'
gmake[2]: Leaving directory
'/builddir/build/BUILD/lsyncd-2.3.0/redhat-linux-build'
gmake[1]: Leaving directory
'/builddir/build/BUILD/lsyncd-2.3.0/redhat-linux-build'
gmake[1]: *** [CMakeFiles/Makefile2:194: CMakeFiles/lsyncd.dir/all] Error 2
gmake: *** [Makefile:139: all] Error 2
Expected results:
No crash
Additional info:
Upstream mailing list proposes this fix which I've attached as a patch:
http://lua-users.org/lists/lua-l/2022-02/msg00113.html
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2111138
8 months, 3 weeks
[Bug 2050290] New: lua: typo on man page
by bugzilla＠redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2050290
Bug ID: 2050290
Summary: lua: typo on man page
Product: Fedora
Version: 35
Hardware: All
OS: All
Status: NEW
Component: lua
Severity: low
Assignee: spotrh(a)gmail.com
Reporter: loganjerry(a)gmail.com
QA Contact: extras-qa(a)fedoraproject.org
CC: 4le(a)live.com, drjohnson1(a)gmail.com,
lua-packagers-sig(a)lists.fedoraproject.org,
mhroncok(a)redhat.com, michel(a)michel-slm.name,
rob.myers(a)gtri.gatech.edu, spotrh(a)gmail.com
Target Milestone: ---
Classification: Fedora
Description of problem:
The man page says (in part):
LUA_PATH, LUA_PATH_5_4
Initial value of package.cpath, the path used by require to search for
Lua loaders.
That should be package.path, not package.cpath. This caused me a minute or so
of confusion. :-)
Version-Release number of selected component (if applicable):
lua-5.4.3-4.fc35.x86_64
How reproducible:
N/A
Steps to Reproduce:
1.
2.
3.
Actual results:
Expected results:
Additional info:
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2050290
10 months
[Bug 2091484] New: luarocks package should pull in lua-devel as a dependency
by bugzilla＠redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2091484
Bug ID: 2091484
Summary: luarocks package should pull in lua-devel as a
dependency
Product: Fedora
Version: rawhide
Status: NEW
Component: luarocks
Assignee: michel(a)michel-slm.name
Reporter: ferdnyc(a)gmail.com
QA Contact: extras-qa(a)fedoraproject.org
CC: ktdreyer(a)ktdreyer.com,
lua-packagers-sig(a)lists.fedoraproject.org,
michel(a)michel-slm.name
Target Milestone: ---
Classification: Fedora
Description of problem:
A new Fedora user reported[1] problems using luarocks after install, because it
failed to compile a module after downloading it. The user eventually worked out
on their own that they needed to install lua-devel, but they shouldn't have had
to puzzle that solution out. By its very nature, luarocks needs to have the lua
headers available for it to function properly. It should pull in lua-devel as a
dependency automatically when installed.
Version-Release number of selected component (if applicable):
luarocks-3.7.0-3.fc35.noarch
How reproducible:
100%
Steps to Reproduce:
1. sudo dnf install luarocks
2. luarocks install --local lcurses
3.
Actual results:
"Error: Failed finding Lua header files. You may need to install them or
configure LUA_INCDIR."
Expected results:
Package compiles successfully
Additional info:
[1]: https://ask.fedoraproject.org/t/problem-using-luarocks-on-f35/22897
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2091484
11 months, 4 weeks
[Bug 2088772] New: Luarocks for el9
by bugzilla＠redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2088772
Bug ID: 2088772
Summary: Luarocks for el9
Product: Fedora EPEL
Version: epel9
OS: Linux
Status: NEW
Component: luarocks
Assignee: michel(a)michel-slm.name
Reporter: ulrik.haugen(a)liu.se
QA Contact: extras-qa(a)fedoraproject.org
CC: ktdreyer(a)ktdreyer.com,
lua-packagers-sig(a)lists.fedoraproject.org,
michel(a)michel-slm.name
Target Milestone: ---
Classification: Fedora
Please add luarocks to epel for el9.
I just rebuilt luarocks-3.5.0-1.el9.noarch.rpm on an rhel9 system and it works
without modification.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2088772
1 year
[Bug 2104743] New: CVE-2022-33099 lua: heap buffer overflow in luaG_errormsg() in ldebug.c due to uncontrolled recursion in error handling [fedora-all]
by bugzilla＠redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2104743
Bug ID: 2104743
Summary: CVE-2022-33099 lua: heap buffer overflow in
luaG_errormsg() in ldebug.c due to uncontrolled
recursion in error handling [fedora-all]
Product: Fedora
Version: 36
Status: NEW
Component: lua
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: spotrh(a)gmail.com
Reporter: trathi(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: 4le(a)live.com, drjohnson1(a)gmail.com,
lua-packagers-sig(a)lists.fedoraproject.org,
mhroncok(a)redhat.com, michel(a)michel-slm.name,
rob.myers(a)gtri.gatech.edu, spotrh(a)gmail.com
Target Milestone: ---
Classification: Fedora
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2104743
1 year, 1 month
[Bug 2073889] New: CVE-2022-28805 lua: dev-lang/lua: heap buffer overread [fedora-all]
by bugzilla＠redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2073889
Bug ID: 2073889
Summary: CVE-2022-28805 lua: dev-lang/lua: heap buffer overread
[fedora-all]
Product: Fedora
Version: 35
Status: NEW
Component: lua
Keywords: Security, SecurityTracking
Severity: low
Priority: low
Assignee: spotrh(a)gmail.com
Reporter: ahanwate(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: 4le(a)live.com, drjohnson1(a)gmail.com,
lua-packagers-sig(a)lists.fedoraproject.org,
mhroncok(a)redhat.com, michel(a)michel-slm.name,
rob.myers(a)gtri.gatech.edu, spotrh(a)gmail.com
Target Milestone: ---
Classification: Fedora
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2073889
1 year, 1 month