lua-users home
lua-l archive

[Date Prev][Date Next][Thread Prev][Thread Next] [Date Index] [Thread Index]

>>>>> "aman" == aman agrawal <> writes:

 aman> Hi,
 aman> Can you please tell me what are the changes required if we want
 aman> to apply the patch for CVE-2020-15888 in Lua-5.2.2

That CVE is a mess; it links to a bunch of unrelated bugs and commits
and has incorrect version information and a useless description.

As far as I can see, nothing in it is applicable to any version other
than 5.4.0 exactly. So the answer to your question is "nothing".

(That said, 5.2.2 clearly has numerous other bugs, some of them serious;
why are you using it?)