Source: lua5.4 Version: 5.4.3-1 Severity: important Tags: security upstream Forwarded: http://lua-users.org/lists/lua-l/2021-11/msg00195.html X-Debbugs-Cc: car...@debian.org, Debian Security Team <t...@security.debian.org>
Hi, The following vulnerability was published for lua5.4. CVE-2021-44647[0]: | Lua 5.4.4 and 5.4.2 are affected by SEGV by type confusion in | funcnamefromcode function in ldebug.c which can cause a local denial | of service. If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2021-44647 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44647 [1] http://lua-users.org/lists/lua-l/2021-11/msg00195.html [2] http://lua-users.org/lists/lua-l/2021-11/msg00204.html Regards, Salvatore