HCE2-SA-2024-0191 Critical HCE 2.0 Security Fix(es): Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file. (CVE-2021-43519) singlevar in lparser.c in Lua from (including) 5.4.0 up to (excluding) 5.4.4 lacks a certain luaK_exp2anyregup call, leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code. (CVE-2022-28805) Lua v5.4.3 and above are affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which can cause a local denial of service. (CVE-2021-44647) HCE 2.0 lua-5.4.3-3.r10.hce2.aarch64.rpm lua-devel-5.4.3-3.r10.hce2.aarch64.rpm lua-help-5.4.3-3.r10.hce2.noarch.rpm lua-5.4.3-3.r10.hce2.x86_64.rpm lua-devel-5.4.3-3.r10.hce2.x86_64.rpm lua-help-5.4.3-3.r10.hce2.noarch.rpm