Ubuntu alert USN-8262-1 (lua5.1)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8262-1] Lua vulnerability
Date:
             
 
Fri, 08 May 2026 10:39:50 +0000
Message-ID:
             
 
<E1wLIcY-0006sj-GU@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-8262-1
May 08, 2026

lua5.1 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 16.04 LTS

Summary:

Lua could be made to crash or run programs as your login if it
opened a specially crafted file.

Software Description:
- lua5.1: Lua is an embeddable scripting language

Details:

It was discovered that the Lua parser incorrectly handled garbage collection
when processing specially crafted Lua scripts. A remote attacker could possibly
use this issue to cause a denial of service or execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS
  liblua5.1-0                     5.1.5-8ubuntu1+esm1
                                  Available with Ubuntu Pro
  lua5.1                          5.1.5-8ubuntu1+esm1
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8262-1
  CVE-2025-49844


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=358z
-----END PGP SIGNATURE-----