-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Low: lua security update Advisory ID: RHSA-2023:2582-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2023:2582 Issue date: 2023-05-09 CVE Names: CVE-2022-28805 ==================================================================== 1. Summary: An update for lua is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 9) - aarch64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux BaseOS (v. 9) - aarch64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux CRB (v. 9) - aarch64, ppc64le, s390x, x86_64 3. Description: The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Security Fix(es): * lua: heap buffer overread (CVE-2022-28805) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.2 Release Notes linked from the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2073884 - CVE-2022-28805 lua: heap buffer overread 6. Package List: Red Hat Enterprise Linux AppStream (v. 9): aarch64: lua-5.4.4-3.el9.aarch64.rpm lua-debuginfo-5.4.4-3.el9.aarch64.rpm lua-debugsource-5.4.4-3.el9.aarch64.rpm lua-libs-debuginfo-5.4.4-3.el9.aarch64.rpm ppc64le: lua-5.4.4-3.el9.ppc64le.rpm lua-debuginfo-5.4.4-3.el9.ppc64le.rpm lua-debugsource-5.4.4-3.el9.ppc64le.rpm lua-libs-debuginfo-5.4.4-3.el9.ppc64le.rpm s390x: lua-5.4.4-3.el9.s390x.rpm lua-debuginfo-5.4.4-3.el9.s390x.rpm lua-debugsource-5.4.4-3.el9.s390x.rpm lua-libs-debuginfo-5.4.4-3.el9.s390x.rpm x86_64: lua-5.4.4-3.el9.x86_64.rpm lua-debuginfo-5.4.4-3.el9.x86_64.rpm lua-debugsource-5.4.4-3.el9.x86_64.rpm lua-libs-debuginfo-5.4.4-3.el9.x86_64.rpm Red Hat Enterprise Linux BaseOS (v. 9): Source: lua-5.4.4-3.el9.src.rpm aarch64: lua-debuginfo-5.4.4-3.el9.aarch64.rpm lua-debugsource-5.4.4-3.el9.aarch64.rpm lua-libs-5.4.4-3.el9.aarch64.rpm lua-libs-debuginfo-5.4.4-3.el9.aarch64.rpm ppc64le: lua-debuginfo-5.4.4-3.el9.ppc64le.rpm lua-debugsource-5.4.4-3.el9.ppc64le.rpm lua-libs-5.4.4-3.el9.ppc64le.rpm lua-libs-debuginfo-5.4.4-3.el9.ppc64le.rpm s390x: lua-debuginfo-5.4.4-3.el9.s390x.rpm lua-debugsource-5.4.4-3.el9.s390x.rpm lua-libs-5.4.4-3.el9.s390x.rpm lua-libs-debuginfo-5.4.4-3.el9.s390x.rpm x86_64: lua-debuginfo-5.4.4-3.el9.i686.rpm lua-debuginfo-5.4.4-3.el9.x86_64.rpm lua-debugsource-5.4.4-3.el9.i686.rpm lua-debugsource-5.4.4-3.el9.x86_64.rpm lua-libs-5.4.4-3.el9.i686.rpm lua-libs-5.4.4-3.el9.x86_64.rpm lua-libs-debuginfo-5.4.4-3.el9.i686.rpm lua-libs-debuginfo-5.4.4-3.el9.x86_64.rpm Red Hat Enterprise Linux CRB (v. 9): aarch64: lua-debuginfo-5.4.4-3.el9.aarch64.rpm lua-debugsource-5.4.4-3.el9.aarch64.rpm lua-devel-5.4.4-3.el9.aarch64.rpm lua-libs-debuginfo-5.4.4-3.el9.aarch64.rpm ppc64le: lua-debuginfo-5.4.4-3.el9.ppc64le.rpm lua-debugsource-5.4.4-3.el9.ppc64le.rpm lua-devel-5.4.4-3.el9.ppc64le.rpm lua-libs-debuginfo-5.4.4-3.el9.ppc64le.rpm s390x: lua-debuginfo-5.4.4-3.el9.s390x.rpm lua-debugsource-5.4.4-3.el9.s390x.rpm lua-devel-5.4.4-3.el9.s390x.rpm lua-libs-debuginfo-5.4.4-3.el9.s390x.rpm x86_64: lua-5.4.4-3.el9.i686.rpm lua-debuginfo-5.4.4-3.el9.i686.rpm lua-debuginfo-5.4.4-3.el9.x86_64.rpm lua-debugsource-5.4.4-3.el9.i686.rpm lua-debugsource-5.4.4-3.el9.x86_64.rpm lua-devel-5.4.4-3.el9.i686.rpm lua-devel-5.4.4-3.el9.x86_64.rpm lua-libs-debuginfo-5.4.4-3.el9.i686.rpm lua-libs-debuginfo-5.4.4-3.el9.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2022-28805 https://access.redhat.com/security/updates/classification/#low https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBZFo1ztzjgjWX9erEAQgYrA/9HjgnBlv6Ut9K4dAx2q0MnxIwf9TaBBHF LjNRNjY9vnxcf+3obKjbjgkHjCRuAeJvkxhsEmPwxOwZoRu0oS7AyjEi2r9gM3Ji tykW5Y1yoLmMyXlcgYs7fWxmkP7nN6cN2wIbpMiYHCEXf6Nm8yRvBevzE+aGKO0w wlBXac26BaxI9EMGoo+VB3AGRmSxuWJRCme8RRLO0QRPdtfTtgzlv7qyZW0+heDw 1auRjxOKJoA5ivuesuFKtOJrkqECztZ5ATnKKHzAS8VBSb2j8z2HaJx0EMddFH50 4dOTOEzzt4k/uAoExSnJeb9UxC9/JpNHHZ3VjojgAw4TyV5aJuwd807Pb9MqhCux zPbD7feiLDlKujx3iJBYSJtQfLtRQmBVs1LxQCsTTWxAoAJmd3nLyiBfrTjl8jW5 oNo8KBhYAt1rrVg+fbS7XCOsB12as5gW+sGjXFM/u2o0jTI2Eu24LxP19LeCxUJe ouEGTBAoJCRo58TEh1yVL62EkUDjoGDmd1yJJHiUhjylQ+R2NWtVijrdjH3hrCB+ b10undSd3NCFFJ7fE8KtjPTesqIA3NslzcnDUZDNHLZFvkJYANHVq4+XUYrW6jmQ kn3zNKzdNvpLydR82xaTSfPTsx13A0GdxfUICTL+zLx4Zt3xZcruNU3kXg06T1eL u7CRCzIg2pE=QjQU -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://listman.redhat.com/mailman/listinfo/rhsa-announce