Simon L. Nielsen wrote:
On 2008.04.06 12:47:11 -0700, stheg olloydson wrote:
According to the information at mitre.org, both 6.x and 7.0 are
vulnerable. I see in NetBSD's CVS log for
src/lib/libc/stdlib/strfmon.c, they have patched this on March
27.
Note that the change in NetBSD is possibly incomplete to fix the
issue. I'm not sure what the final conclusion was on that.
The final conclusion was a subsequent commit on the 27th:
http://archive.netbsd.se/?ml=netbsd-source-changes&a=2008-03&m=6750722
http://archive.netbsd.se/?ml=netbsd-source-changes&a=2008-03&m=6846592
We're still in the process of getting the changes pulled up.
adrian.
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
