> Theo de Raadt <deraadt@xxxxxxxxxxxxxxx> writes: > > > I am shocked this is not being considered a security problem. > > calm down, it is. It's already fixed in CVS and we will do a release > shortly after we've verified that it doesn't break things. Well, the attitude of uninformed denial still sucks...