LYNX-DEV Alleged Lynx security emergency

[Thomas Jones]

Dear Lynx-dev,


There is a story making the rounds that CERT, the Computer Emergency 
Response Team at Carnegie-Mellon, has spotted a security vulnerability 
in the -Lynx- (text-only) browser. Is this true? I note that there is no 
advisory to this effect in comp.security.announce.

The reason why I am raising the issue is that a major local online 
system, called "Sailor," has put an electronic block in its Lynx Internet 
service, thinking that the block will somehow protect it from this 
[alleged] Lynx bug.

Yours,

Tom Jones

;
; To UNSUBSCRIBE:  Send a mail message to address@hidden
;                  with "unsubscribe lynx-dev" (without the
;                  quotation marks) on a line by itself.
;