Sharutils buggy?

[full-disclosure () lists netsys com (martin f krafft)]

--ibTvN161/egqYuK8
Content-Type: text/plain; charset=iso-8859-15
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

I'd like to get some educated thoughts and opinions on a recently found
potential bug:

  http://www.aerasec.de/security/index.html?lang=3Den&id=3Dae-200205-037
  http://online.securityfocus.com/bid/4742
  http://www.aerasec.de/security/index.html?lang=3Den&id=3Dae-200205-049
  http://www.aerasec.de/security/index.html?lang=3Den&id=3Dae-200204-033
  http://bugs.debian.org/149454
  http://www.kb.cert.org/vuls/id/336083

cheers,

--=20
martin;              (greetings from the heart of the sun.)
  \____ echo mailto: !#^."<*>"|tr "<*> mailto:"; net@madduck
 =20
today, i will gladly share my experience and advice,
for there are no sweeter words than "i told you so."

--ibTvN161/egqYuK8
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iEYEARECAAYFAj0zWa4ACgkQIgvIgzMMSnWgpACgzMRsqnaPn0XvVlfQd3EVLtlB
47MAn3c/h+DYkymFi0wF5cSVXItUqvGI
=f+q5
-----END PGP SIGNATURE-----

--ibTvN161/egqYuK8--