Comment by benmmurphy

I think this is still 'broken' because Redis have applied custom patches to the Lua source code in order to prevent sandbox escapes. If Debian Redis is using the normal Lua then these patches will not have been applied.

https://github.com/redis/redis/commit/49efe300af258e83f377cd...

and you can check the history on that file to see they haven't removed the fix:

https://github.com/redis/redis/commits/unstable/deps/lua/src...

it could be the latest lua version that Debian ships with has 'safe' byte code evaluation and this fix no longer needs to be applied.