-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 25 Aug 2025 13:39:40 +0200 Source: luajit Architecture: source Version: 2.1.0~beta3+git20220320+dfsg-4.1+deb12u1 Distribution: bookworm Urgency: high Maintainer: Debian Lua Team Changed-By: Guilhem Moulin Changes: luajit (2.1.0~beta3+git20220320+dfsg-4.1+deb12u1) bookworm; urgency=high . * Non-maintainer upload. * Fix CVE-2024-25176: Stack-buffer-overflow in lj_strfmt_wfnum() in lj_strfmt_num.c. * Fix CVE-2024-25177: Unsinking of IR_FSTORE for NULL metatable, which leads to Denial of Service. * Fix CVE-2024-25178: Out-of-bounds read in the stack-overflow handler in lj_state.c. Checksums-Sha1: 75c4bfa72f80ed4154e026c2d213c58f04f0aafc 2948 luajit_2.1.0~beta3+git20220320+dfsg-4.1+deb12u1.dsc bd0614e8fc86fc4160ec63b7ef2944be22087363 14240 luajit_2.1.0~beta3+git20220320+dfsg-4.1+deb12u1.debian.tar.xz d71bc9650b48dcc2a2cb60156de481054c74a166 8482 luajit_2.1.0~beta3+git20220320+dfsg-4.1+deb12u1_amd64.buildinfo Checksums-Sha256: 4738332dcafdda10ade1a87fa0e3b51bce733bf715af0b50c8fb8c0ca3b651b6 2948 luajit_2.1.0~beta3+git20220320+dfsg-4.1+deb12u1.dsc 59c6b0aae91f9debe37045812d6fb99b39f41deb7d1b254467ed3d3d417352dd 14240 luajit_2.1.0~beta3+git20220320+dfsg-4.1+deb12u1.debian.tar.xz 9cc5d71761d392c7b0a0118cce1d2bc83561694bdccf6dab8487f68fb14dc19f 8482 luajit_2.1.0~beta3+git20220320+dfsg-4.1+deb12u1_amd64.buildinfo Files: ccd4f24adbb6b6c79cb6355715a10979 2948 interpreters optional luajit_2.1.0~beta3+git20220320+dfsg-4.1+deb12u1.dsc b583fc86d5e940cb65d36e22741c15dc 14240 interpreters optional luajit_2.1.0~beta3+git20220320+dfsg-4.1+deb12u1.debian.tar.xz a5f822fca2a7f20eacbf9e2d9451069c 8482 interpreters optional luajit_2.1.0~beta3+git20220320+dfsg-4.1+deb12u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAmitegQACgkQ05pJnDwh pVLaow/+MLA7ptvV6JACzelfYAHBxSjc4xSsF+c0LCfQpRqC1KFc4sLwZJ+DvAXX mPtj7/eLV3JksjD2RkASb4ZFTWM2dPibw1zufhAN3i9hjy2FRD4zd1v+e0SZJ4qZ GBzF7eGIVNLC5PDe+Q5QEKY+dSZmOBOS0Inv5jG6BF5mHK9KngnbHID5OFIC8Ce8 fVTIQ0q7A2nQAeFVlZN0Jg7iOAGeIqfjRi6eAwhTSJIPC1j1nT/ZZ75pTtXQf1/t 7ErBp4Y+lIYCgqU1bkeRIdTL9H43WrJgISEVXhrJ1ZQq7t4LET8IgNscBhqMVwTQ oPCSP+r6AQndSqfCCHjP30nI41CgcQqW9MfwzSsva2w7C3y0cyfovJ2TVm/gonCx 0P+E35cWXGDkExBqvJDaglWF4XNi5zYIn6KAFPmJaZxRdGoYGS1rtRNhuQIgXxc1 hwhxh0GAa8iM2TobGJ/hIW/elhOJsYKZm+zIIc7OWRyq6HAgzl2BHWyaQWapsQIv Az1yra1kB8Bekqx4Y1WshgR9xtyRwoCciOtyxptf3LOjhXr20UcKq+DYT14S+0/d EHO6J0FO+iiZCXgM/SG0cQa1IGnZOgfQmeLAMoJun5BN5b/1Bb/QLkjTBRXXZq4N zAyKgK9LRsJs/1DvpOpIBE65crs8g8h6eQiKmDvEbnyuU5ZrXEw= =Z4rf -----END PGP SIGNATURE-----