Debian dla-4283 : libluajit-5.1-2 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4283 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4283-1 [email protected]...

Advisory ROSA-SA-2021-1911

Software: luajit 2.0.4 OS: Cobalt 7.9 CVE-ID: CVE-2020-24372 CVE-Crit: HIGH CVE-DESC: LuaJIT before 2.1.0-beta3 has out-of-range reads in ljerrrun in ljerr.c. CVE-STATUS: default CVE-REV: default...

OESA-2021-1057 luajit security update

LuaJIT is a Just-In-Time Compiler JIT for the Lua programming language. Lua is a powerful, dynamic and light-weight programming language. It may be embedded or used as a general-purpose, stand-alone language. Security Fixes: LuaJIT through 2.1.0-beta3 has an out-of-bounds read in ljerrrun in...

CVE-2020-24372

LuaJIT up to version 2.1.0-beta3 contains an out-of-bounds read in lj_err_run() (lj_err.c). This CVE-2020-24372 is confirmed by multiple connected sources (Debian DLA-4283-1, OSV entries, and Nessus notes) and is addressed by Debian in 11.2.29 for the luajit package. The vulnerability arises from...