Re: NetBSD's libbz2 affected by this?

["Brian A. Seklecki" <lavalamp%spiritual-machines.org@localhost>]

On Tue, 2008-03-18 at 14:24 +0100, Jonathan Schleifer wrote:
> Hello!
> 
> I just wanted to know if NetBSD's libbz2 is also affected by this:
> 
> https://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html


FYI -- if you didn't see the commit:

It will also likely be considered for netbsd4 and netbsd3 (probably as a
samller, in-line patch) after a some stability testing in -current.

~BAS

P src/dist/bzip2/CHANGES         
P src/dist/bzip2/LICENSE         
P src/dist/bzip2/Makefile        
P src/dist/bzip2/Makefile-libbz2_
U src/dist/bzip2/README          
P src/dist/bzip2/README.COMPILATI
U src/dist/bzip2/README.XML.STUFF
cvs update: src/dist/bzip2/Y2K_IN
P src/dist/bzip2/blocksort.c     
U src/dist/bzip2/bz-common.xsl   
U src/dist/bzip2/bz-fo.xsl       
U src/dist/bzip2/bz-html.xsl     
P src/dist/bzip2/bzdiff          
P src/dist/bzip2/bzdiff.1        
P src/dist/bzip2/bzgrep          
P src/dist/bzip3/bzgrep.1        
U src/dist/bzip2/bzip.css        
P src/dist/bzip2/bzip2.1         
P src/dist/bzip2/bzip2.c         
P src/dist/bzip2/bzip2netbsd     
P src/dist/bzip2/bzip2recover.c  
P src/dist/bzip2/bzlib.c         
P src/dist/bzip2/bzlib.h         
P src/dist/bzip2/bzlib_private.h 
P src/dist/bzip2/bzmore.1        
P src/dist/bzip2/compress.c      
P src/dist/bzip2/crctable.c      
P src/dist/bzip2/decompress.c    
P src/dist/bzip2/dlltest.c       
U src/dist/bzip2/entities.xml    
U src/dist/bzip2/format.pl       
P src/dist/bzip2/huffman.c       
U src/dist/bzip2/manual.html     
cvs update: src/dist/bzip2/manual
U src/dist/bzip2/manual.xml   

> Looks to me like NetBSD 4 is also affected by this since it uses 1.0.2.
> Is there already a fix for NetBSD, for example an update to bzip2 1.0.5?