Oval Definition:	oval:org.opensuse.security:def:73848
Revision Date: 2021-06-29 Version: 1 Title: Security update for lua53 (Moderate) Description: This update for lua53 fixes the following issues: Update to version 5.3.6: - CVE-2020-24371: lgc.c mishandles the interaction between barriers and the sweep phase, leading to a memory access violation involving collectgarbage (bsc#1175449) - CVE-2020-24370: ldebug.c allows a negation overflow and segmentation fault in getlocal and setlocal (bsc#1175448) - Long brackets with a huge number of '=' overflow some internal buffer arithmetic. Family: unix Class: patch Status: Reference(s): 1126826 1126829 1126831 1140126 1142649 1143609 1152930 1153768 1153770 1157755 1160254 1160590 1163333 1163744 1174477 1175448 1175449 CVE-2019-12972 CVE-2019-14250 CVE-2019-14444 CVE-2019-17450 CVE-2019-17451 CVE-2019-9074 CVE-2019-9075 CVE-2019-9077 CVE-2020-14342 CVE-2020-24370 CVE-2020-24371 SUSE-SU-2020:3060-1 SUSE-SU-2021:2196-1 Platform(s): SUSE Linux Enterprise Desktop 15 SP3 SUSE Linux Enterprise High Performance Computing 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 SUSE Linux Enterprise Server 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 Product(s): Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 is installed AND Package Information cifs-utils-6.9-5.6 is installed OR pam_cifscreds-6.9-5.6 is installed Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 SP2 is installed AND Package Information binutils-2.35-7.11 is installed OR binutils-devel-32bit-2.35-7.11 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP3 is installed AND Package Information liblua5_3-5-5.3.6-3.6.1 is installed OR liblua5_3-5-32bit-5.3.6-3.6.1 is installed OR lua53-5.3.6-3.6.1 is installed OR lua53-devel-5.3.6-3.6.1 is installed
BACK