lua 5.1.5 CVEs / lua 5.3 with luci

[Luna Jernberg]

Can one be curious and ask what is gonna be used instead of lua, or is
that still not 100% decided yet?

On Wed, Oct 26, 2022 at 3:54 PM Jo-Philipp Wich <jo at mein.io> wrote:
>
> Hi,
>
> all errors you quoted are occurring within Lua code. The view rendering etc.
> mostly happens in JavaScript on the client side, this is why things /seem/ to
> work. Many backend actions are implemented as rpcd plugins in Lua code though,
> and all those seem to fail (not register with rpcd in the first place, likely
> because the requested interpreter /usr/bin/lua is not there).
>
> Newer Lua versions do have various incompatibilities with Lua 5.1 and the
> deprecation of setfenv(), getfenv() in favor to _ENV will require a lot of
> refactoring in LuCI framework code.
>
> Since LuCI is in the process of migrating away from Lua, only keeping an
> optional compatibility Lua runtime for legacy applications, it is unlikely
> that any work will be spent to convert the framework code to later Lua versions.
>
> ~ Jo
>
> _______________________________________________
> openwrt-devel mailing list
> openwrt-devel at lists.openwrt.org
> https://lists.openwrt.org/mailman/listinfo/openwrt-devel