[Debian] High CVE: CVE-2019-6706/CVE-2020-24370 lua5.3: multiple CVEs

CVE-2019-6706: https://nvd.nist.gov/vuln/detail/CVE-2019-6706

Lua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker who is able to trigger a debug.upvaluejoin call in which the arguments have certain relationships.

CVE-2020-24370: https://nvd.nist.gov/vuln/detail/CVE-2020-24370

ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal(3,2^31).

Base Score: High

Reference:

['liblua5.3-0_5.3.3-1.1_amd64.deb===>liblua5.3-0_5.3.3-1.1+deb11u1_amd64.deb']