CVE Request: "LuaAuthzProvider" in Apache HTTP Server mixes up arguments

[Eric Covener <covener () gmail com>]

https://issues.apache.org/bugzilla/show_bug.cgi?id=57204

LuaAuthzProvider in Apache HTTP Server 2.4.3 and later allows users to
supply their own Lua scripts to perform authorization.  If the same
script is specified in httpd.conf  multiple times, with different
(free-form) arguments, only the last specified argument is used for
all invocations of the script.