Debian/luajit: critical 9.8

LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240626 have a stack-buffer-overflow in lj_strfmt_wfnum in lj_strfmt_num.c.

Action: Upgrade luajit to 2.1.0~beta3+git20220320+dfsg-4.1+deb12u1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2024-25176
• https://security-tracker.debian.org/tracker/CVE-2024-25176

published 2025-07-07T17:15:27.247Z · modified 2026-09-15T09:03:00.971647448Z · JSON