On Fri, 28 Oct 2005, Greg MacManus wrote:

Hi,

That looks like it will do it.

The original vulnerability discoverer wishes to be credited as 'vade79',
so he should probably be credited instead of me.

ok (actually the credit should still list you as well, since you provided feedback with a suggestion on how to resolve this - but it's up to you
if you don't want your name on it).

This says "multiple vendor" in the title:

        Have the vendors been contacted?
        (who's responsible for doing that)

        Do they need a patch against 2.8.5?
        (it's not a difficult patch to resync)

        What's the timeframe for resolving this?

I expect that I can make a new fix for 2.8.5 this weekend, putting that in

        http://lynx.isc.org/lynx2.8.5/patches/

--
Thomas E. Dickey
http://invisible-island.net
ftp://invisible-island.net


_______________________________________________
Lynx-dev mailing list
[email protected]
http://lists.nongnu.org/mailman/listinfo/lynx-dev

Reply via email to