UbuntuUpdates.org

Package "luajit"

Name: luajit

Description:

Just in time compiler for Lua programming language version 5.1
Latest version: 2.1.0+git20231223.c525bcb+dfsg-1ubuntu0.1
Release: noble (24.04)
Level: updates
Repository: universe
Homepage: https://luajit.org

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "luajit"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "luajit" in Noble

Repository Area Version
base universe 2.1.0+git20231223.c525bcb+dfsg-1
security universe 2.1.0+git20231223.c525bcb+dfsg-1ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2.1.0+git20231223.c525bcb+dfsg-1ubuntu0.1 2026-07-14 19:08:03 UTC

  luajit (2.1.0+git20231223.c525bcb+dfsg-1ubuntu0.1) noble-security; urgency=medium

  * SECURITY UPDATE: stack-buffer-overflow
    - debian/patches/CVE-2024-25176.patch: fix zero stripping in %g number
      formatting.
    - CVE-2024-25176
  * SECURITY UPDATE: denial-of-service
    - debian/patches/CVE-2024-25177.patch: fix unsinking of IR_FSTORE for NULL
      metatable.
    - CVE-2024-25177
  * SECURITY UPDATE: out-of-bounds read
    - debian/patches/CVE-2024-25178.patch: rework stack overflow handling
    - CVE-2024-25178

 -- Paulo Flabiano Smorigo <email address hidden> Thu, 09 Jul 2026 16:38:10 +0000
CVE-2024-25176 LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240626 have a stack-buffer-overflow in lj_strfmt_wfnum in lj_strfmt_num.c.
CVE-2024-25177 LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of Service (Do
CVE-2024-25178 LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in lj_state.c.


About   -   Send Feedback to @ubuntu_updates