tocsin

Alpine/lua5.3: high 7.5

Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have c

Action: Upgrade lua5.3 to 5.3.5-r2 or later.

Affected

introducedfixedlast affected
05.3.5-r2-

Fixed versions

5.3.5-r2

Sources

published · modified · JSON