linux/poky.git/meta/recipes-devtools/lua, branch yocto-4.0.1

lua: fix CVE-2022-28805

2022-04-19T13:02:13+00:00

singlevar in lparser.c in Lua through 5.4.4 lacks a certain luaK_exp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code. https://nvd.nist.gov/vuln/detail/CVE-2022-28805 (From OE-Core rev: d2ba3b8850d461bc7b773240cdf15b22b31a3f9e) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

lua: upgrade 5.4.3 -> 5.4.4

2022-02-05T17:46:05+00:00

(From OE-Core rev: 734cdfddd2d2a0a0e3be2b577bd4175a2abd73e5) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

lua: Backport fix for CVE-2021-43396

2021-11-16T22:20:33+00:00

Backport the fix for CVE-2021-43396 ("C stack overflow with coroutines") from upstream. (From OE-Core rev: e74fb3f7a8171cc1293583241a9ef43a515a9320) Signed-off-by: Richard Purdie

lua: update 5.3.6 -> 5.4.3

2021-10-11T17:41:37+00:00

Drop three backports and 0001-Allow-building-lua-without-readline-on-Linux.patch (feature added upstream, adjust the recipe accordingly). Adjust ar/ranlib flags for reproducibility on liblua.a. License-Update: lines moved around, formatting (From OE-Core rev: c2cad5ecfbbcee99b3cbe71efeeac9a875b6e5ff) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

lua: add a recipe from meta-oe

2021-10-11T17:41:37+00:00

Lua is a hard dependency in rpm 4.17. (From OE-Core rev: b06a2ffb5ded807dbb30078d10740ec294732cad) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie