#991689 Possible CVE-2014-5461 in moarvm-dev

Package:
moarvm-dev
Source:
moarvm
Description:
development files for moarvm
Submitter:
Movses Tovmasyan
Date:
2021-08-07 15:39:05 UTC
Severity:
normal
Tags:
#991689#5
Date:
2021-07-30 10:22:59 UTC
From:
To:
moarvm-dev uses the obsolete version of minilua
(single-file port of Lua) which has CVE-2014-5461
Patch attached below.
#991689#10
Date:
2021-08-07 15:27:01 UTC
From:
To:
Hi

Exploiting this CVE requires feeding arbitrary lua code to moarvm. I don't
think this is possible. So I won't patch directly moarvm.

Nevertheless, I'll forward this bug upstream.

All the best