Lua no patch for CVE-2021-43519 in Mariner 1.0 (#1975)

* Lua no patch for CVE-2021-43519 in Mariner 1.0 * Update lua spec and package core txt files * Update lua spec
microsoft · Jan 22, 2022 · 81ae6df · 81ae6df
1 parent 7441236
commit 81ae6df
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/SPECS/lua/CVE-2021-43519.nopatch b/SPECS/lua/CVE-2021-43519.nopatch
@@ -0,0 +1,4 @@
+# Patch provided not applicable for 5.3.5 version.
+# No crash is observed with sample provided in exploit with lua 5.3.5 version.
+# Add patch from below commit when lua version updated to 5.4.3
+# commit - 74d99057a5146755e737c479850f87fd0e3b6868