I.e. fixed in 3.7 and current.
...and where is the advistory? errata? fix for 3.5 / 3.6? :)
I'm not Ms. OpenBSD. I guess actual exploitation isn't that imminent. But OTOH I'd guess that the diff could be easily backported, so feel free to do it.
But as Hannah said, you can always backport this yourself. Thats the beauty of open source stuff.
Or better yet, buy a 3.7 CD and upgrade to a new and improve OS where you would have your bug fix already in after the regular patch cycle of a new install.
Plus it would help the project at the same time!
Look to me the best option here! (:>
Daniel
