Thomas Perale
a2c906ee3b
This CVE is specific for the version 5.1.5 still present in Buildroot. It has been fixed in 5.2.3 and thereby doesn't affects the other versions available in Buildroot. - CVE-2014-5461 Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows context-dependent attackers to cause a denial of service (crash) via a small number of arguments to a function with a large number of fixed arguments. For more information see: - https://security-tracker.debian.org/tracker/CVE-2014-5461 - https://udd.debian.org/patches.cgi?src=lua5.1&version=5.1.5-11 A patch present in Debian is used to address this vulnerability. Signed-off-by: Thomas Perale <thomas.perale@mind.be> Signed-off-by: Julien Olivain <ju.o@free.fr>