Re: pkg/57586: tcpdump used in this NetBSD is vulnerable

[Benny Siegert <bsiegert%gmail.com@localhost>]

The following reply was made to PR pkg/57586; it has been noted by GNATS.

From: Benny Siegert <bsiegert%gmail.com@localhost>
To: gnats-bugs%netbsd.org@localhost
Cc: pkg-manager%netbsd.org@localhost, gnats-admin%netbsd.org@localhost, pkgsrc-bugs%netbsd.org@localhost
Subject: Re: pkg/57586: tcpdump used in this NetBSD is vulnerable
Date: Thu, 17 Aug 2023 14:19:07 +0200

 On Thu, Aug 17, 2023 at 7:08=E2=80=AFAM <thresh416%outlook.com@localhost> wrote:
 
 > As CVE-2020-8037 described, the ppp decapsulator in tcpdump 4.9.3 can be =
 convinced to allocate a large amount of memory, which is still used in this=
  project.
 
 Is this talking about tcpdump in base, or about the net/tcpdump
 package in pkgsrc? The latter is at 4.99.4.
 
 --=20
 Benny