DJ Lucas wrote:
> Hi guys.  Is there a reason the cgi vulnerability patch, the one
> mentioned in the link that explains the vulnerability, isn't applied for
> Lynx?  The text seems to suggest that it applies directly to the 2.8.5
> source and, the needed parts do apply to the 2,8.5 version (I did it
> manually).  I don't have an easy way to test it, or rather I haven't
> researched enough to test it.  I can say that it builds with the patch
> and appears to work in casual use, but I don't really know yet how to
> trigger the bug (not my goal for tonight).  Has anyone looked into this
> previously?

Maybe because it does nothing with the default instructions?  It's only
when you use an additional option that it comes into play.

The note should probably be changed to a warning though.

  -- Bruce
-- 
http://linuxfromscratch.org/mailman/listinfo/blfs-dev
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Reply via email to