W3C home > Mailing lists > Public > www-lib@w3.org > October to December 2005

libwww security advisory

From: Jose Kahan <jose.kahan@w3.org>
Date: Fri, 14 Oct 2005 11:00:00 +0200
To: Vic Bancroft <bancroft@america.net>
Cc: www-lib@w3.org
Message-ID: <20051014090000.GA9323@rakahanga.inrialpes.fr>
Hi Vic,

Have you seen this security advisory about a DoS problem in libwww?
As the current release has that problem, maybe we should remove it
and put in a new one, that includes all your code. 

However. one thing that bothers me in making a new release is that
the Changelog has not been updated. Its purpose was to log all the
changes done to the libwww tree. Without it, there's no way of documenting
what changes people should expect between the two versions. Maybe you have
documented them elsewhere?


1. http://secunia.com/advisories/17119/
2. https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=159597

Received on Friday, 14 October 2005 09:00:08 UTC

This archive was generated by hypermail 2.3.1 : Tuesday, 6 January 2015 21:33:56 UTC