main/lua5.2: security upgrade to 5.2.3 (CVE-2014-5461)

fixes #3334