Just for awareness: the canonical upstream repository *is* the OpenResty
lua-nginx-module repository you've linked.
However, keep in mind that there is a new dependency that the Lua module
will need going forward for Debian - `resty-core` which pulls in a ton
of extra OpenResty code which is necessary for the Lua module to work in
the latest versions.
While this is a security bug, and the upstream repository is properly
identified, you should keep in mind that any Lua module beyond version
0.10.15 will no longer work without the lua-resty-core library, which is
not currently packaged. Downstream in Ubuntu, we decided that having to
pull in the resty core libraries just to use Lua module was 'too much
additional dependencies' for Ubuntu to maintain, so we yanked it from
Hirsute (the currently in development release that will be 21.04) going
forward and are pointing users who still need the Lua module to use
OpenResty's NGINX variant instead.
In order for this to be fixed, unless you nitpick the specific patch,
you will need to pull in lua-resty-core as an additional package and
dependency for the Lua module in order for this to work.
Thomas
