[plug] incase anyone wasnt aware..CERT advisory [ BIND ]

[Bret Busby]

Christian wrote:

<snip>

> those that are are probably mostly professional admins who should be on
> their vendors security mailing list anyway (as a bare minimum).

And, bugtraq, and, especially the CERT mailing list, shouldn't they, as
a matter of course?

> 
> But, since you want to hear about security vulnerabilities, here's one
> for StarOffice...
> 
> http://www.securityfocus.com/bid/1922


"Aargh!" says he, having recently got Star Office 5.2 running on his
6x86 with 32MB RAM (It thinks it can, it thinks it can, it thinks it
can...). (However, on a mainly single-user system, it is notsomuch a
threat, unless someone is able to obtain unauthorised access to the
system)

As you are responsible for the notification of the vulnerability (as
opposed to being responsible for the vulnerability), should the fix be
done, as a security action, regardless of using Star Office?