[Help-smalltalk] Re: [Patch]State of CVE-2009-3736

[Paolo Bonzini]

On 06/24/2010 06:51 PM, Jochen Schmitt wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hallo,
>
> on March 2010 I have introduced a patch to gnu-smalltalk-3.1-8 to fix
> the security issue CVE-2009-3736. Unfortunately, I'm not uptodate
> of the upstream integration of fixing this securiy issue. Therfore I will
> ask, if this issue is fix on gnu-smalltalk-3.2.

Yes, it is fixed.  However, with 3.2 you can also simply configure 
--with-system-libltdl (I suppose you're already using system libffi and 
libsigsegv) and drop the Fedora-specific patch.

Thanks!

Paolo