SUSE-SU-2025:03378-1

Advisory lineage Upstream: 3 Downstream: 0
Published: 26 Sept 2025, 15:00
Last modified:23 Mar 2026, 04:48

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

26 Sept 2025, 15:00
Published
Vulnerability first disclosed
23 Mar 2026, 04:48
Last Modified
Vulnerability information updated

Description

Security update for luajit This update for luajit fixes the following issues: - CVE-2024-25176: Fixed stack-buffer-overflow in lj_strfmt_wfnum in lj_strfmt_num.c (bsc#1246077) - CVE-2024-25177: Fixed unsinking of IR_FSTORE for NULL metatable (bsc#1246078) - CVE-2024-25178: Fixed out-of-bounds read in the stack-overflow handler in lj_state.c (bsc#1246079)

Affected Systems

  • opensuse•luajit&distro=openSUSE Leap 15.6

    < 2.1.0~beta3+git.1624618403.e9577376-150400.4.5.1

  • suse•luajit&distro=SUSE Linux Enterprise Module for Basesystem 15 SP6

    < 2.1.0~beta3+git.1624618403.e9577376-150400.4.5.1

  • suse•luajit&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7

    < 2.1.0~beta3+git.1624618403.e9577376-150400.4.5.1

  • suse•luajit&distro=SUSE Linux Enterprise Module for Package Hub 15 SP6

    < 2.1.0~beta3+git.1624618403.e9577376-150400.4.5.1

  • suse•luajit&distro=SUSE Linux Enterprise Module for Package Hub 15 SP7

    < 2.1.0~beta3+git.1624618403.e9577376-150400.4.5.1

References (7)