Linux · Security advisory · May 9, 2023
ALSA-2023:2582: Security update for 3 packages
ALSA-2023:2582, released May 9, 2023, fixes 1 CVE across 3 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0298
87th percentile
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| lua | almalinux 9 | 5.4.4-3.el9 |
| lua-devel | almalinux 9 | 5.4.4-3.el9 |
| lua-libs | almalinux 9 | 5.4.4-3.el9 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2022-28805 | liblua5.4-0: singlevar in lparser.c in Lua from (including) 5.4.0 up to (excluding) 5.4.4 lacks a certain luaK_exp2anyregup call,... | 9.1 | 0.0298 | None reported |
Showing 1 to 1 of 1
1