Re: CERT Vendor-Initiated Bulletin VB-98.04 - xterm.Xaw

[alan () LXORGUK UKUU ORG UK (Alan Cox)]

> impression that with the decision to make X commercial, they disavowed
> older versions of X.  Security and patches for older versions of X
> should now fall into the responsibility to those parties who maintain
> them.

Indeed - which means they lied to CERT when they told CERT everyone
affected had the patches or CERT screwed up in releasing the report.

If CERT were working by their own (at times ridiculous) rules they would
have informed XFree86 and sat on the announcement until they had patches.

Maybe the CERT guys would like to tell bugtraq what happened ?

Alan