CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

lang/lua545.4.8

Powerful, efficient, lightweight, embeddable scripting language

Maintainer
andrew@tao11.riddles.org.uk
Packages
lua54 5.4.8
Upstream
Higher version available: 5.5.1
CPE
lua:lua from the port
WWW
https://www.lua.org/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (14)

Wen Heping (wen) · 5.4.8
lang/lua54: Updatte to 5.4.8

PR:		288019
Reported by:	wen@
Approved by:	maintainer
50f358177e
Vladimir Druzenko (vvd) · 5.4.7
lang/lua54: update 5.4.6 → 5.4.7

Changelog: https://www.lua.org/bugs.html#5.4.7
Commitlog: https://www.lua.org/work/diffs-lua-5.4.6-lua-5.4.7.html

PR:		280955
Approved by:	andrew@tao11.riddles.org.uk (maintainer, timeout > 14 days)
108aa10056
Tijl Coosemans (tijl) · 5.4.6_1
Mk/bsd.port.mk: Add __MAKE_CONF=${NONEXISTENT} to WRK_ENV

And remove it from individual ports.  Use WRK_ENV in custom build
commands where necessary.

FreeBSD make(1) includes /usr/share/mk/sys.mk and that includes
/etc/make.conf if it exists.  This happens when you run make in a port
directory but it also happens when the upstream build system uses make.
This commit disables make.conf inclusion in the latter case because
users can define variables like CFLAGS in make.conf that override ports
framework variables and this can cause problems that are difficult to
diagnose.

If there are any build customisations made through make.conf that stop
working because of this commit then they should be made available by the
ports tree through some mechanism, e.g. an option in a port.

Some ports were picking up variables from Poudriere make.conf and
required fixes:

- astro/wmspaceweather x11-clocks/wmcalclock: Add OPSYS to MAKE_ENV.
- games/zhlt: Add ARCH to MAKE_ENV.
- graphics/tachyon: Upstream ARCH is not ports tree ARCH.
  Set ALL_TARGET=bsd so upstream ARCH is defined correctly.
  Enable multi-threading support while here.

PR:		277455
Exp-run by:	antoine
d7511b9d00
Muhammad Moinur Rahman (bofh) · 5.4.6_1
lang/lua54: Impelled to share/man

Approved by:    portmgr (blanket)
577e953f21
Robert Clausecker (fuz) · 5.4.6
lang/lua54: update to 5.4.6

Submitter becomes maintainer.

5.4.6 fixes the following bugs in 5.4.4 and 5.4.5:

Lua 5.4.5:
    Changing the signature of 'lua_resetthread' broke ABI.

Lua 5.4.4:
    lua.c assumes that argv has at least one element.
    Lua can generate wrong code when _ENV is <const>.
    Wrong code generation for constants in bitwise operations.
    Lua-stack overflow when C stack overflows while handling an error.
    'lua_settop' may use a pointer to stack invalidated by 'luaF_close'.
    'break' may not properly close variable in a 'for' loop.
    GC not setting a proper target for next cycle after a full collection in generational mode.
    'utf8.codes' does not raise an error on spurious continuation bytes.
    C-stack overflow with deep nesting of coroutine.close.
    Wrong line in error message for arithmetic errors.
    Loading a corrupted binary file can segfault.

In addition some improvements have been made to the manual.

PR:		271561
Approved by:	russ.haley@gmail.com (maintainer timeout, two weeks)
b4c88d1e71
Koichiro Iwao (meta) · 5.4.4
lang/lua54: Update to 5.4.4

PR:		267430
Approved by:	maintainer timeout
c8bef09e14
Stefan Eßer (se) · 5.4.2
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 5.4.2
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Bernhard Froehlich (decke) · 5.4.2
lang/lua54: Add CPE information

Approved by:    portmgr (blanket)
d015b673ee
Mathieu Arnold (mat) · 5.4.2
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 5.4.2
Remove # $FreeBSD$ from Makefiles.
305f148f48
Mathieu Arnold (mat) · 5.4.2
Remove occurrences of %%LUA_LIBDIR%%.

Differential Revision:	https://reviews.freebsd.org/D29138
18f4cb47cc
Sunpoet Po-Chuan Hsieh (sunpoet) · 5.4.2
Update to 5.4.2

Changes:	https://www.lua.org/versions.html
Differential Revision:	https://reviews.freebsd.org/D27589
Submitted by:	Russell Haley <russ.haley@gmail.com> (maintainer)
Reviewed by:	Andrew Gierth <andrew_tao173@riddles.org.uk>
9eb3bfc621
Kyle Evans (kevans) · 5.4.1
[NEW PORT] lang/lua54 - Lua 5.4.1

Highlights for this version:
- new generational mode for garbage collection
- to-be-closed variables
- const variables
- complete list: https://www.lua.org/manual/5.4/readme.html#changes

The Lua Manual can be found here: https://www.lua.org/manual/5.4/

Incompatibilities from the previous version are specifically documented
here: https://www.lua.org/manual/5.4/manual.html#8

Submitted by:	Russ Haley <russ haley gmail com>
Co-submitted by:	Andrew Gierth <andrew_tao173 riddles org uk>
Differential Revision:	https://reviews.freebsd.org/D14709
3f8f20827c