linux/poky.git/meta/recipes-devtools/lua/lua_5.4.4.bb, branch 4.2_M1

lua: Backport fix for CVE-2022-33099

2022-07-18T10:47:37+00:00

Fixes stack overflow while handling recurring errors in Lua-stack (From OE-Core rev: caad9d5f7184f0fa60fa7770e5d3da3f533647cb) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie

lua: Fix multilib buildpath reproducibility issues

2022-07-07T23:09:42+00:00

The .pc we install ourselves for lua has hardcoded /lib assumptions in it which means in a multilib environment, full build paths end up in users like rpm's configuration. Fix the .pc file to use a correct includedir and libdir to resolve those reproducibility issues. (From OE-Core rev: 93bee5c74b8d181adf93de4b4101e25d24780603) Signed-off-by: Richard Purdie Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

lua: fix CVE-2022-28805

2022-04-19T13:02:13+00:00

singlevar in lparser.c in Lua through 5.4.4 lacks a certain luaK_exp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code. https://nvd.nist.gov/vuln/detail/CVE-2022-28805 (From OE-Core rev: d2ba3b8850d461bc7b773240cdf15b22b31a3f9e) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

lua: upgrade 5.4.3 -> 5.4.4

2022-02-05T17:46:05+00:00

(From OE-Core rev: 734cdfddd2d2a0a0e3be2b577bd4175a2abd73e5) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie