<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/poky.git/meta/recipes-devtools/lua, branch mickledore-next</title>
<subtitle>Mirror of git.yoctoproject.org/poky</subtitle>
<id>https://git.enea.com/cgit/linux/poky.git/atom?h=mickledore-next</id>
<link rel='self' href='https://git.enea.com/cgit/linux/poky.git/atom?h=mickledore-next'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/'/>
<updated>2023-03-08T16:41:55+00:00</updated>
<entry>
<title>lua: Fix install conflict when enable multilib.</title>
<updated>2023-03-08T16:41:55+00:00</updated>
<author>
<name>Wang Mingyu</name>
<email>wangmy@fujitsu.com</email>
</author>
<published>2023-03-08T01:40:16+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=59972136638c6348c793458981711c8d5f96f8ae'/>
<id>urn:sha1:59972136638c6348c793458981711c8d5f96f8ae</id>
<content type='text'>
Error: Transaction test error:
  file /usr/include/luaconf.h conflicts between attempted installs of lua-dev-5.4.4-r0.aarch64 and lib32-lua-dev-5.4.4-r0.armv7ahf_neon

The differences between the two files are as follows:
@@ -219,7 +219,7 @@

 #define LUA_ROOT       "/usr/"
 #define LUA_LDIR       LUA_ROOT "share/lua/" LUA_VDIR "/"
-#define LUA_CDIR       LUA_ROOT "lib64/lua/" LUA_VDIR "/"
+#define LUA_CDIR       LUA_ROOT "lib/lua/" LUA_VDIR "/"

 #if !defined(LUA_PATH_DEFAULT)
 #define LUA_PATH_DEFAULT  \

(From OE-Core rev: b58d86f9902a7eb7a821a3e36ba298c082c0f1f1)

Signed-off-by: Wang Mingyu &lt;wangmy@fujitsu.com&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>lua: Backport fix for CVE-2022-33099</title>
<updated>2022-07-18T10:47:37+00:00</updated>
<author>
<name>Khem Raj</name>
<email>raj.khem@gmail.com</email>
</author>
<published>2022-07-17T14:50:27+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=832fb7c1c3edaf35650763af447f5aae192ef856'/>
<id>urn:sha1:832fb7c1c3edaf35650763af447f5aae192ef856</id>
<content type='text'>
Fixes stack overflow while handling recurring errors in Lua-stack

(From OE-Core rev: caad9d5f7184f0fa60fa7770e5d3da3f533647cb)

Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>lua: Fix multilib buildpath reproducibility issues</title>
<updated>2022-07-07T23:09:42+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2022-07-06T16:16:55+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=87d4b74f0e69aa13c6f7d54c51e7136e58696a60'/>
<id>urn:sha1:87d4b74f0e69aa13c6f7d54c51e7136e58696a60</id>
<content type='text'>
The .pc we install ourselves for lua has hardcoded /lib assumptions in it
which means in a multilib environment, full build paths end up in users
like rpm's configuration.

Fix the .pc file to use a correct includedir and libdir to resolve
those reproducibility issues.

(From OE-Core rev: 93bee5c74b8d181adf93de4b4101e25d24780603)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>lua: fix CVE-2022-28805</title>
<updated>2022-04-19T13:02:13+00:00</updated>
<author>
<name>Steve Sakoman</name>
<email>steve@sakoman.com</email>
</author>
<published>2022-04-18T19:04:08+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=91e14d3a8e6e67267047473f5c449f266b44f354'/>
<id>urn:sha1:91e14d3a8e6e67267047473f5c449f266b44f354</id>
<content type='text'>
singlevar in lparser.c in Lua through 5.4.4 lacks a certain luaK_exp2anyregup
call, leading to a heap-based buffer over-read that might affect a system that
compiles untrusted Lua code.

https://nvd.nist.gov/vuln/detail/CVE-2022-28805

(From OE-Core rev: d2ba3b8850d461bc7b773240cdf15b22b31a3f9e)

Signed-off-by: Steve Sakoman &lt;steve@sakoman.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>lua: upgrade 5.4.3 -&gt; 5.4.4</title>
<updated>2022-02-05T17:46:05+00:00</updated>
<author>
<name>Alexander Kanavin</name>
<email>alex.kanavin@gmail.com</email>
</author>
<published>2022-02-02T18:27:42+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=02a8a2c621183b26d912b4d68916fbbcf9e98580'/>
<id>urn:sha1:02a8a2c621183b26d912b4d68916fbbcf9e98580</id>
<content type='text'>
(From OE-Core rev: 734cdfddd2d2a0a0e3be2b577bd4175a2abd73e5)

Signed-off-by: Alexander Kanavin &lt;alex.kanavin@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>lua: Backport fix for CVE-2021-43396</title>
<updated>2021-11-16T22:20:33+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2021-11-15T11:47:35+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=26ff8acdc9c3dbe827d0929b8738f76e6d6fdef5'/>
<id>urn:sha1:26ff8acdc9c3dbe827d0929b8738f76e6d6fdef5</id>
<content type='text'>
Backport the fix for CVE-2021-43396 ("C stack overflow with coroutines")
from upstream.

(From OE-Core rev: e74fb3f7a8171cc1293583241a9ef43a515a9320)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>lua: update 5.3.6 -&gt; 5.4.3</title>
<updated>2021-10-11T17:41:37+00:00</updated>
<author>
<name>Alexander Kanavin</name>
<email>alex.kanavin@gmail.com</email>
</author>
<published>2021-09-08T18:01:03+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=6500c74e6276bb7baa4c94057c6e0d1651607e30'/>
<id>urn:sha1:6500c74e6276bb7baa4c94057c6e0d1651607e30</id>
<content type='text'>
Drop three backports and 0001-Allow-building-lua-without-readline-on-Linux.patch
(feature added upstream, adjust the recipe accordingly).

Adjust ar/ranlib flags for reproducibility on liblua.a.

License-Update: lines moved around, formatting
(From OE-Core rev: c2cad5ecfbbcee99b3cbe71efeeac9a875b6e5ff)

Signed-off-by: Alexander Kanavin &lt;alex.kanavin@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>lua: add a recipe from meta-oe</title>
<updated>2021-10-11T17:41:37+00:00</updated>
<author>
<name>Alexander Kanavin</name>
<email>alex.kanavin@gmail.com</email>
</author>
<published>2021-09-08T18:01:02+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=5196cfbbf8795e16b5bc606a9e348fcc6bf3cc83'/>
<id>urn:sha1:5196cfbbf8795e16b5bc606a9e348fcc6bf3cc83</id>
<content type='text'>
Lua is a hard dependency in rpm 4.17.

(From OE-Core rev: b06a2ffb5ded807dbb30078d10740ec294732cad)

Signed-off-by: Alexander Kanavin &lt;alex.kanavin@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
</feed>
