From 28681292e5c48d827a4f80cad63e979ade056ac6 Mon Sep 17 00:00:00 2001 From: Steven Johnstone Date: Sat, 8 Aug 2020 16:03:28 +0100 Subject: [PATCH] Fix installation instructions for luarocks With the flag "--from=rocks-cvs", luarocks fails to find the latest and greatest and falls back to version 0.4.0-0. This version is vulnerable to CVE-2018-11218. --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 417337a..6b56569 100644 --- a/README.md +++ b/README.md @@ -17,7 +17,7 @@ Using LuaRocks (http://luarocks.org): * Install current Git master head from GitHub: - sudo luarocks install lua-cmsgpack --from=rocks-cvs + sudo luarocks install lua-cmsgpack scm-1 --server=https://luarocks.org/dev * Install from current working copy