Control: tag -1 confirmed On Wed, Jun 28, 2023 at 02:22:21PM +0200, Guilhem Moulin wrote: > lua5.3=5.3.3-1.1 (buster, bullseye) is vulnerable to CVE-2019-6706 and > CVE-2020-24370. These were fixed in an a recent buster-security upload > (cf. DLA-3469-1). The Security Team didn't think a DSA was warranted > for bullseye, and suggested to go via bullseye-pu instead.
Please go ahead. Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D352 4C51 ed25519/0x196418AAEB74C8A1: CA619D65A72A7BADFC96D280196418AAEB74C8A1
