Re: Censorware Summit Take II, from The Netly News

[Kent Crispin <kent@songbird.com>]

On Fri, Jul 18, 1997 at 02:48:15PM -0700, Alan wrote:
> 
> Get the new version of Lynx. (2.7?)  It does a better job of handling
> frames.

You should get it anyway, because of serious security related bug:

                    Computer Incident Advisory Capability
                           ___  __ __    _     ___
                          /       |     /_\   /
                          \___  __|__  /   \  \___
             __________________________________________________________
 
                             INFORMATION BULLETIN
 
               Lynx Temporary Files & LYDownload.c Vulnerabilities
 
July 16, 1997 16:00 GMT                                            
Number H-82
______________________________________________________________________________
PROBLEM:       Two vulnerabilities exist for Lynx: 1) temporary 
files, and
               2) LYDownload.c.
PLATFORM:      All Unix or Unix-like systems running Lynx up to and including
               version 2.7.1
DAMAGE:        1) May allow local users to gain root privileges.
               2) This vulnerability may be exploited by anyone who 
can provide
                  Lynx a carefully crafted URL.
SOLUTION:      Apply patches or workarounds listed below.

[...]  

-- 
Kent Crispin				"No reason to get excited",
kent@songbird.com			the thief he kindly spoke...
PGP fingerprint:   B1 8B 72 ED 55 21 5E 44  61 F4 58 0F 72 10 65 55
http://songbird.com/kent/pgp_key.html