Re: zlib bug

["Todd C. Miller" <Todd.Miller@courtesan.com>]

In message <Pine.BSO.4.40.0203120020280.9483-100000@heorot.stanford.edu>
	so spake Ted U (grendel):

> OpenBSD as a whole, until a few hours ago, was vulnerable to the flaw in
> any program that used libz (I count 7 in /usr/bin) would double free.  It
> just so happens that double freeing reports a warning instead of
> corrupting the heap.

Actually, I committed a fix for the problem in January.  We didn't
realize it was a security problem at the time (and neither did the
zlib folks).

 - todd