Actually, it turns out that there's a more recent patch from CERT than
what was in the bugtraq posting I integrated.
A revised patch (containing the fixes from the one actually referenced
from the advisory) will go into pkgsrc shortly.
- Bill