Re: CERT does it again.

[lrr () CERT ORG (Lawrence R. Rogers)]

> Im really let down by CERT.  From now on im posting straight to bugtraq.
>
> To CERT: i told you about this hole.  Without me, you wouldnt have known,
> and the least you could do is get me the credit i deserved.

The initial posting of these bulletins on July 15 did not include attribution
to Aaron.  When he drew our attention to the fact that we had not credited
him, updated bulletins were posted on July 17. These bulletins are available
from:

        ftp://info.cert.org/pub/cert_bulletins/VB-97.05.lynx
        ftp://info.cert.org/pub/cert_bulletins/VB-97.06.lynx

Note that Aaron's post to bugtraq is dated July 22.

Aaron: we apologize for not letting you know that these updates had been made
and made available on our FTP archive.

FYI: here are the current credits as they appear in the updated bulletins:

 VB-97.05.lynx
  The CERT Coordination Center staff thanks Aaron of Internet Maine for
  reporting the problem and thanks Jim Spath and his lynx-dev colleagues for
  their cooperation in developing this bulletin.

 VB-97.06.lynx
  The CERT Coordination Center staff thanks Aaron of Internet Maine for
  calling our attention to the problem and thanks Jim Spath and his lynx-dev
  colleagues for their cooperation in developing this bulletin.
- --

                                        Larry Rogers
                                        Member of the Technical Staff
                                        CERT* Coordination Center
                                        Software Engineering Institute
                                        Carnegie Mellon University
                                        4500 Fifth Avenue
                                        Pittsburgh, PA  USA  15213-3890

Internet e-mail:  cert () cert org
        (monitored during business hours)
Telephone:  +1 412-268-7090
        (24-hour hotline
        CERT Coordination Center personnel answer
        8:30 a.m.- 5:00 p.m. EST(GMT-5)/EDT(GMT-4)
        on call for emergencies during other hours)


Registered U.S. Patent and Trademark Office

The CERT Coordination Center is part of the Software Engineering
Institute (SEI). The SEI is sponsored by the Department of Defense.



-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBM9UWVnVP+x0t4w7BAQGAgQP/VKZe4UadZO1fjLtg+I6Pb3rXTCZnyE2M
+jfL1J/nrt0rO582+Mg3nPZ5YkqhWhYKRN1+DSh8HyokrXVh+cc9totHSm5sz9e2
shE9CdzWHFNfJr9KAi99hjweQK8v3+7Iu9+LX7bIBpx+enTSboXGmGhjubG0eClf
SC1K9orpPjE=
=SydU
-----END PGP SIGNATURE-----