Steve Sakoman 91e14d3a8e lua: fix CVE-2022-28805 ...

singlevar in lparser.c in Lua through 5.4.4 lacks a certain luaK_exp2anyregup
call, leading to a heap-based buffer over-read that might affect a system that
compiles untrusted Lua code.

https://nvd.nist.gov/vuln/detail/CVE-2022-28805

(From OE-Core rev: d2ba3b8850d461bc7b773240cdf15b22b31a3f9e)

Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2022-04-19 14:02:13 +01:00

..

lua

lua: fix CVE-2022-28805

2022-04-19 14:02:13 +01:00

lua_5.4.4.bb

lua: fix CVE-2022-28805

2022-04-19 14:02:13 +01:00