Debian Package Tracker

general

source: lua5.3 (main)
version: 5.3.3-1.1
maintainer: Enrico Tassi (DMD) (LowNMU)
uploaders: Ondřej Surý [DMD]
arch: any
std-ver: 3.9.8
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 5.3.3-1
stable: 5.3.3-1.1
testing: 5.3.3-1.1
unstable: 5.3.3-1.1

versioned links

5.3.3-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.3.3-1.1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

liblua5.3-0
liblua5.3-0-dbg
liblua5.3-dev
lua5.3 (3 bugs: 0, 3, 0, 0)

action needed

A new upstream version is available: 5.3.5 high

A new upstream version 5.3.5 is available, you should consider packaging it.

Created: 2019-01-09 Last update: 2019-09-16 09:01

Standards version of the package is outdated. high

The package is severely out of date with respect to the Debian Policy. The package should be updated to follow the last version of Debian Policy (Standards-Version 4.4.0 instead of 3.9.8).

Created: 2017-07-14 Last update: 2019-07-08 20:07

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2019-6706: Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships.

Please fix it.

Created: 2019-01-24 Last update: 2019-07-07 09:00

1 security issue in bullseye high

There is 1 open security issue in bullseye.

1 important issue:

CVE-2019-6706: Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships.

Please fix it.

Created: 2019-07-07 Last update: 2019-07-07 09:00

1 bug tagged patch in the BTS normal

The BTS contains patches fixing 1 bug, consider including or untagging them.

Created: 2019-04-01 Last update: 2019-09-16 13:32

4 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit a1ef1cf01f5ea7bcc79e1e32adc7d38f9e4f9008
Author: Dima Kogan <dima@secretsauce.net>
Date:   Fri Dec 28 11:10:28 2018 -0800

    changelog bump: nmu

commit 2504f45ca9679e30aa5d2975d2674ac18ad4ec23
Author: Dima Kogan <dima@secretsauce.net>
Date:   Fri Nov 30 19:55:53 2018 -0800

    changelog bump

commit eaf205e379f8d7e02e7d1383a01c12fd8c2da4e0
Author: Dima Kogan <dima@secretsauce.net>
Date:   Fri Nov 30 19:44:10 2018 -0800

    added postinst/prerm for the alternatives

commit 6535ab189228dbaaaf2c1918b26a4c652c7f5081
Author: Dima Kogan <dima@secretsauce.net>
Date:   Fri Nov 30 19:40:46 2018 -0800

    Vcs-... tags point to salsa

Created: 2018-12-28 Last update: 2019-09-13 01:47

lintian reports 2 warnings normal

Lintian reports 2 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2019-08-26 Last update: 2019-08-26 03:34

1 ignored security issue in stretch low

There is 1 open security issue in stretch.

1 issue skipped by the security teams:

CVE-2019-6706: Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships.

Please fix it.

Created: 2019-01-24 Last update: 2019-07-07 09:00

1 ignored security issue in buster low

There is 1 open security issue in buster.

1 issue skipped by the security teams:

CVE-2019-6706: Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships.

Please fix it.

Created: 2019-01-24 Last update: 2019-07-07 09:00

news

[rss feed]

[2019-01-03] lua5.3 5.3.3-1.1 MIGRATED to testing (Debian testing watch)
[2018-12-28] Accepted lua5.3 5.3.3-1.1 (source amd64) into unstable (Dima Kogan)
[2017-07-14] Accepted lua5.3 5.3.3-1~bpo8+1 (source amd64) into jessie-backports->backports-policy, jessie-backports (Vincent Bernat)
[2016-12-31] lua5.3 5.3.3-1 MIGRATED to testing (Debian testing watch)
[2016-12-19] Accepted lua5.3 5.3.3-1 (source amd64) into unstable (Ondřej Surý)
[2016-08-11] lua5.3 5.3.1-1.1 MIGRATED to testing (Debian testing watch)
[2016-08-05] Accepted lua5.3 5.3.1-1.1 (source) into unstable (Aurelien Jarno)
[2016-01-10] Accepted lua5.3 5.3.1-1~bpo7+1 (source amd64) into wheezy-backports-sloppy, wheezy-backports-sloppy (Vincent Bernat)
[2016-01-01] Accepted lua5.3 5.3.1-1~bpo8+1 (source amd64) into jessie-backports, jessie-backports (Vincent Bernat)
[2015-08-21] lua5.3 5.3.1-1 MIGRATED to testing (Britney)
[2015-08-15] Accepted lua5.3 5.3.1-1 (source amd64) into unstable, unstable (Enrico Tassi)

bugs [bug history graph]

all: 8
RC: 0
I&N: 7
M&W: 1
F&P: 0
patch: 1

links

homepage
lintian (0, 2)
buildd: logs, checks, clang, reproducibility, cross
popcon
browse source code
edit tags
security tracker
screenshots

ubuntu

[Information about Ubuntu for Debian Developers]

version: 5.3.3-1.1ubuntu1
2 bugs
patches for 5.3.3-1.1ubuntu1