I think adding the text you proposed below would be appropriate. :-) Paul Schmehl ([EMAIL PROTECTED]) Department Coordinator The University of Texas at Dallas AVIEN Founding Member http://www.utdallas.edu/~pauls/
> -----Original Message----- > From: Ben Laurie [mailto:[EMAIL PROTECTED]] > Sent: Thursday, September 26, 2002 2:53 AM > To: Schmehl, Paul L > Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] > Subject: Re: [Full-Disclosure] The last word on the Linux Slapper worm > > As I've pointed out elsewhere, patching old versions without changing > the version number is so stupid it leaves me boggling. But I guess in > future I'll write into advisories: "warning - your vendor may > be such a > moron that you can't tell whether you are vulnerable or not by the > version number, so I advise building from source or switching to a > vendor with a clue". _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
