[Bug 241652] Re: Some security problems (with fixes)

Kees Cook kees at ubuntu.com
Wed Mar 25 18:05:40 UTC 2009


After some discussion with other security folks, I've decided to not
treat these bugfixes as security issues.  Using lua on untrusted code
would be considered a security issue in itself, but that would not be
lua's fault.  The bugs are only triggerable via untrusted code, so this
is not likely to become a problem for lau itself.

That said, once the Jaunty Beta Freeze has lifted, I will get lau5.1
5.1.4 synchronized from Debian.  Thanks for all the feedback on this
report!

** Changed in: lua5.1 (Ubuntu Dapper)
       Status: Triaged => Won't Fix

** Changed in: lua5.1 (Ubuntu Gutsy)
       Status: Triaged => Won't Fix

** Changed in: lua5.1 (Ubuntu Hardy)
       Status: Triaged => Won't Fix

** Changed in: lua5.1 (Ubuntu Intrepid)
       Status: Triaged => Won't Fix

** Changed in: lua5.1 (Ubuntu Jaunty)
       Status: Triaged => In Progress

** Changed in: lua5.1 (Ubuntu Jaunty)
    Milestone: None => ubuntu-9.04

-- 
Some security problems (with fixes)
https://bugs.launchpad.net/bugs/241652
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.

-- 
ubuntu-bugs mailing list
ubuntu-bugs at lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs




More information about the universe-bugs mailing list