> Is anyone familiar with the BUGTRAQ discussions on a local vulnerability
> in Joe 2.8 regarding improper sanity checking on DEADJOE?

The problem is described in:
http://www.wkit.com/include/eng/advisories/wsir0111.txt .

> I'm looking at a patch (we won't go into the source >:} ) to correct:

Credit for this patch should go to Kevin Day <toasty@dragondata.com>.
-- 
Trevor Johnson
http://jpj.net/~trevor/gpgkey.txt