I noticed that both vulnerabilities in the telnet client [1] [2] were
fixed in cvs but
they haven't been pulled up to netbsd-2 and netbsd-3. Is an advisory /
patch pending
or should I just submit a pull up request?

[1] http://www.idefense.com/application/poi/display?id=3D220&type=3Dvulnera=
bilities
[2] http://www.idefense.com/application/poi/display?id=3D221&type=3Dvulnera=
bilities

--=20
Ant=F3nio Marques