[Bug 2192164] New: luarocks-3.9.1 installs to /usr/lib instead of /usr/lib64
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2192164
Bug ID: 2192164
Summary: luarocks-3.9.1 installs to /usr/lib instead of
/usr/lib64
Product: Fedora
Version: rawhide
Status: NEW
Component: luarocks
Assignee: michel(a)michel-slm.name
Reporter: ferdnyc(a)gmail.com
QA Contact: extras-qa(a)fedoraproject.org
CC: epel-packagers-sig(a)lists.fedoraproject.org,
ktdreyer(a)ktdreyer.com,
lua-packagers-sig(a)lists.fedoraproject.org,
michel(a)michel-slm.name
Target Milestone: ---
Classification: Fedora
Description of problem:
I messed up.
As I detail at the end of this Fedora Discussions thread[1], when I submitted
the PR for the luarocks-3.9.1 update, I mistakenly dropped the Fedora patch
that was correcting the default arch-specific library install dir to /usr/lib64
instead of /usr/lib.
So, without that patch, luarocks installs to the wrong library directory.
[1]:
https://discussion.fedoraproject.org/t/luarocks-does-not-install-into-lib...
Version-Release number of selected component (if applicable):
luarocks-3.9.1-1.fc39 (luarocks on f38 and f37 is also affected; possibly EPEL
as well)
How reproducible:
100%
Steps to Reproduce:
1. `sudo luarocks --global install LuaFileSystem`
2. `ls /usr/lib64/lua/5.4/lfs.so`
3. `ls /usr/lib/lua/5.4/lfs.so`
Actual results:
2: ls: cannot access '/usr/lib64/lua/5.4/lfs.so': No such file or directory
3: /usr/lib/lua/5.4/lfs.so
Expected results:
2: /usr/lib64/lua/5.4/lfs.so
3: ls: cannot access '/usr/lib/lua/5.4/lfs.so': No such file or directory
Additional info:
I've already submitted a PR [2] to correct this on rawhide. I'll be happy to
submit backport PRs for f38 and f37 as well, if need be. Any chance we could
get new builds, to correct this unfortunate screw-up on my part?
(I'll even add in an update to luarocks-3.9.2, since that's been released now,
so we kill two birds with one bodhi update.)
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2192164
4 months
[Bug 2208842] New: Lua 5.4 package incorrectly defines Lua 5.2 compatibility
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2208842
Bug ID: 2208842
Summary: Lua 5.4 package incorrectly defines Lua 5.2
compatibility
Product: Fedora
Version: rawhide
OS: Linux
Status: NEW
Component: lua
Severity: medium
Assignee: spotrh(a)gmail.com
Reporter: sentrycraft123(a)gmail.com
QA Contact: extras-qa(a)fedoraproject.org
CC: 4le(a)live.com, drjohnson1(a)gmail.com,
lua-packagers-sig(a)lists.fedoraproject.org,
mhroncok(a)redhat.com, michel(a)michel-slm.name,
spotrh(a)gmail.com
Target Milestone: ---
Classification: Fedora
In the `lua-5.3.0-configure-compat-module.patch` patch `LUA_COMPAT_5_2` gets
defined, whichi makes consumers of it think its compatible with Lua 5.2,
despite Lua 5.4 lacking any kind of code to be.
Reproducible: Always
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2208842
4 months, 1 week
[Bug 2167829] New: [RFE: EPEL9] EPEL9 branch for luarocks
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2167829
Bug ID: 2167829
Summary: [RFE: EPEL9] EPEL9 branch for luarocks
Product: Fedora EPEL
Version: epel9
Status: NEW
Component: luarocks
Assignee: michel(a)michel-slm.name
Reporter: riehecky(a)fnal.gov
QA Contact: extras-qa(a)fedoraproject.org
CC: epel-packagers-sig(a)lists.fedoraproject.org,
ktdreyer(a)ktdreyer.com,
lua-packagers-sig(a)lists.fedoraproject.org,
michel(a)michel-slm.name
Target Milestone: ---
Classification: Fedora
Description of problem:
Can luarocks be branched for EPEL9?
Version-Release number of selected component (if applicable):
How reproducible:
Steps to Reproduce:
1.
2.
3.
Actual results:
Expected results:
Additional info:
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2167829
4 months, 1 week
[Bug 2203802] New: lua-5.4.6 is available
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2203802
Bug ID: 2203802
Summary: lua-5.4.6 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: lua
Keywords: FutureFeature, Triaged
Assignee: spotrh(a)gmail.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: 4le(a)live.com, drjohnson1(a)gmail.com,
lua-packagers-sig(a)lists.fedoraproject.org,
mhroncok(a)redhat.com, michel(a)michel-slm.name,
spotrh(a)gmail.com
Target Milestone: ---
Classification: Fedora
Releases retrieved: 5.4.5, 5.4.6
Upstream release that is considered latest: 5.4.6
Current version/release in rawhide: 5.4.4-9.fc39
URL: https://www.lua.org
Please consult the package updates policy before you issue an update to a
stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/
More information about the service that created this bug can be found at:
https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release...
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from Anitya:
https://release-monitoring.org/project/1847/
To change the monitoring settings for the project, please visit:
https://src.fedoraproject.org/rpms/lua
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2203802
4 months, 2 weeks
[Bug 2064772] New: CVE-2021-44964 lua: use after free allows Sandbox Escape
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2064772
Bug ID: 2064772
Summary: CVE-2021-44964 lua: use after free allows Sandbox
Escape
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: high
Priority: high
Assignee: security-response-team(a)redhat.com
Reporter: pdelbell(a)redhat.com
CC: 4le(a)live.com, caswilli(a)redhat.com,
csutherl(a)redhat.com, drjohnson1(a)gmail.com,
fedora(a)famillecollet.com, fjansen(a)redhat.com,
gzaronik(a)redhat.com, hdegoede(a)redhat.com,
jburrell(a)redhat.com, jclere(a)redhat.com,
jwon(a)redhat.com, kaycoth(a)redhat.com,
krathod(a)redhat.com,
lua-packagers-sig(a)lists.fedoraproject.org,
mhroncok(a)redhat.com, michel(a)michel-slm.name,
moceap(a)hotmail.com, mschmidt(a)redhat.com,
mturk(a)redhat.com, packaging-team-maint(a)redhat.com,
pjindal(a)redhat.com, rob.myers(a)gtri.gatech.edu,
spotrh(a)gmail.com, szappis(a)redhat.com
Target Milestone: ---
Classification: Other
Use after free in garbage collector and finalizer of lgc.c in Lua interpreter
5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script
file.
References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-44964
https://github.com/Lua-Project/lua-5.4.4-sandbox-escape-with-new-vulnerab...
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44964
http://lua-users.org/lists/lua-l/2021-12/msg00007.html
http://lua-users.org/lists/lua-l/2021-12/msg00015.html
http://lua-users.org/lists/lua-l/2021-12/msg00030.html
http://lua-users.org/lists/lua-l/2021-11/msg00186.html
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2064772
4 months, 3 weeks