Re: LYNX-DEV new security bulletin drafts

[Jonathan Sergent]

 ] FWIW, UNIX spell couldn't find "writeable" or "writable."  My paper
 ] dictionary has "writable."~

The OED has both...

*snip patches*

Applied (patch didn't like them and rather than fight with it I just 
did it by hand), posted as version 5.  

I don't like the language you added re: single user systems in the 
/tmp bulletin.  I think it's better to say that the attacker needs 
to have access to an account on the machine in question; we don't
want lazy Linux or NetBSD administrators reading this and thinking
they're safe if they run multi-user systems.  I posted a version 6 
with that minor change, as well as an additional word in bulletin 
2 to clarify what branches are.


--jss.
;
; To UNSUBSCRIBE:  Send a mail message to address@hidden
;                  with "unsubscribe lynx-dev" (without the
;                  quotation marks) on a line by itself.
;