oss-sec mailing list archives

Re: CVE request:Lynx invalid URL parsing with '?'

From: Leo Famulari <leo () famulari name>
Date: Thu, 3 Nov 2016 18:54:35 -0400

On Thu, Nov 03, 2016 at 05:58:14PM +0800, redrain root wrote:

I can't find any bugtracker in lynx ,so i will disclose by this mail and
sent to the author dickey () invisible-island net.

redrain (rootredrain () gmail com)
Date:2016-11-03
Version: 2.8.8pre.4、2.8.9dev.8 and earlier


FYI, as far as I can tell, this bug is present in 2.8.9dev.9 as well.

Attachment: signature.asc
Description:

Current thread:

CVE request:Lynx invalid URL parsing with '?' redrain root (Nov 03)
- Re: CVE request:Lynx invalid URL parsing with '?' Leo Famulari (Nov 03)
- Re: CVE request:Lynx invalid URL parsing with '?' cve-assign (Nov 04)
- Re: CVE request:Lynx invalid URL parsing with '?' Thomas Dickey (Nov 04)
- Message not available
  - Re: [FD] [oss-security] CVE request:Lynx invalid URL parsing with '?' Michal Zalewski (Nov 05)