NetBSD 9.4 — LuaJIT2 — multiple vulnerabilities (5 CVEs) — patch and remediation guide
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2020-15890 CVE-2020-24372 CVE-2024-25176 CVE-2024-25178 CVE-2024-25177 Upstream summary: pkgsrc audit-packages flagged LuaJIT2<2.1.1713773202 for vulnerability class 'out-of-bounds-read'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-15890 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]