Logo
componentluajit
Name
luajit
Version
2.1
Type
library
Description
Just-In-Time Compiler for Lua
Licenses
MIT
PURL
-
CPE
cpe:2.3:*:luajit:luajit:2.1:*:*:*:*:*:*:*

Other Versions#


Project
Branch
Version
kirkstone
2.1.0~beta3-210112
master
2.1

Patches#


#
Title
Author
Resolve
1
Fix unsinking of IR_FSTORE for NULL metatable.
Changqing Li <changqing.li@windriver.com>
CVE-2024-25177
2
Use builtin for clear_cache
Khem Raj <raj.khem@gmail.com>
3
Rework stack overflow handling.
Mike Pall <mike>
CVE-2024-25178
4
Do not strip automatically, this leaves the stripping busines to OE
Khem Raj <raj.khem@gmail.com>
5
Fix zero stripping in %g number formatting.
Mike Pall <mike>
CVE-2024-25176
6
Patch #6
Khem Raj <raj.khem@gmail.com>

Vulnerabilities#


Name
Analysis
Description
Patched
LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in lj_state.c.
Patched
LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of Service (DoS).
Patched
LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240626 have a stack-buffer-overflow in lj_strfmt_wfnum in lj_strfmt_num.c.