Madelyn Olson 357191acb9

Apply security fixes for CVEs (#1113) ...

Apply the security fixes for the release.

(CVE-2024-31449) Lua library commands may lead to stack overflow and
potential RCE.
(CVE-2024-31227) Potential Denial-of-service due to malformed ACL
selectors.
(CVE-2024-31228) Potential Denial-of-service due to unbounded pattern
matching.

---------

Signed-off-by: Madelyn Olson <madelyneolson@gmail.com>

2024-10-02 13:11:08 -07:00

..

fpconv.c

Lua: Upgrade cjson to 2.1.0 (2012-03-01)

2014-11-14 17:08:33 +01:00

fpconv.h

Lua: remove new warning added by cjson header

2014-11-14 17:08:44 +01:00

lapi.c

Protect any table which is reachable from globals and added globals white list.

2022-04-27 00:37:40 +03:00

lapi.h

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

lauxlib.c

Fix compilation warnings in Lua and jemalloc dependencies (#7785)

2020-09-29 17:10:54 +03:00

lauxlib.h

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

lbaselib.c

Lua updated to version 5.1.5.

2013-04-29 12:00:54 +02:00

lcode.c

Lua updated to version 5.1.5.

2013-04-29 12:00:54 +02:00

lcode.h

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

ldblib.c

Lua updated to version 5.1.5.

2013-04-29 12:00:54 +02:00

ldebug.c

Added support for Lua readonly tables.

2022-04-27 00:20:54 +03:00

ldebug.h

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

ldo.c

Fix compilation warnings in Lua and jemalloc dependencies (#7785)

2020-09-29 17:10:54 +03:00

ldo.h

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

ldump.c

Fix Lua compile warning on GCC 12.1 (#11115)

2022-08-14 14:29:05 +03:00

lfunc.c

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

lfunc.h

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

lgc.c

Lua updated to version 5.1.5.

2013-04-29 12:00:54 +02:00

lgc.h

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

linit.c

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

liolib.c

Lua updated to version 5.1.5.

2013-04-29 12:00:54 +02:00

llex.c

Lua updated to version 5.1.5.

2013-04-29 12:00:54 +02:00

llex.h

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

llimits.h

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

lmathlib.c

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

lmem.c

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

lmem.h

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

loadlib.c

Lua updated to version 5.1.5.

2013-04-29 12:00:54 +02:00

lobject.c

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

lobject.h

Added support for Lua readonly tables.

2022-04-27 00:20:54 +03:00

lopcodes.c

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

lopcodes.h

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

loslib.c

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

lparser.c

Lua updated to version 5.1.5.

2013-04-29 12:00:54 +02:00

lparser.h

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

lstate.c

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

lstate.h

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

lstring.c

Lua: Use all characters to calculate string hash (#9449)

2021-09-09 12:47:26 +03:00

lstring.h

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

lstrlib.c

Lua updated to version 5.1.5.

2013-04-29 12:00:54 +02:00

ltable.c

Added support for Lua readonly tables.

2022-04-27 00:20:54 +03:00

ltable.h

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

ltablib.c

Fix compilation warnings in Lua and jemalloc dependencies (#7785)

2020-09-29 17:10:54 +03:00

ltm.c

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

ltm.h

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

lua_bit.c

Apply security fixes for CVEs (#1113)

2024-10-02 13:11:08 -07:00

lua_cjson.c

Avoid mostly harmless integer overflow in cjson (#12456)

2023-08-05 07:57:06 +03:00

lua_cmsgpack.c

Lua cjson and cmsgpack integer overflow issues (CVE-2022-24834) (#12398)

2023-07-10 10:26:09 +03:00

lua_struct.c

[FIX] revisit CVE-2015-8080 vulnerability

2020-02-10 16:32:46 +09:00

lua.c

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

lua.h

Protect any table which is reachable from globals and added globals white list.

2022-04-27 00:37:40 +03:00

luac.c

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

luaconf.h

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

lualib.h

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

lundump.c

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

lundump.h

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

lvm.c

Added support for Lua readonly tables.

2022-04-27 00:20:54 +03:00

lvm.h

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

lzio.c

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

lzio.h

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

Makefile

Merge remote-tracking branch 'origin/unstable' into unstable

2014-11-14 17:10:48 +01:00

print.c

makefile adapted to link against lua lib and to pass the 32bit flag to Lua building system

2011-05-25 12:32:43 +02:00

strbuf.c

Avoid mostly harmless integer overflow in cjson (#12456)

2023-08-05 07:57:06 +03:00

strbuf.h

Lua cjson and cmsgpack integer overflow issues (CVE-2022-24834) (#12398)

2023-07-10 10:26:09 +03:00