I talked to the security Team (Marc), they said for the SRU our usual timing is enough as there is a another layer of protection against those kind of attacks. Therefore the bug will stay open for a while unless discussed otherwise.
un-assigning the security Team for now, and thanks for the guidance ** Changed in: open-vm-tools (Ubuntu Xenial) Assignee: Ubuntu Security Team (ubuntu-security) => (unassigned) ** Changed in: open-vm-tools (Ubuntu Bionic) Assignee: Ubuntu Security Team (ubuntu-security) => (unassigned) ** Changed in: open-vm-tools (Ubuntu Cosmic) Assignee: Ubuntu Security Team (ubuntu-security) => (unassigned) ** Changed in: open-vm-tools (Ubuntu Xenial) Status: New => Won't Fix -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1822204 Title: open-vm-tools 10.3.10 released To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/open-vm-tools/+bug/1822204/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs