There is a missing character in hints/netbsd.sh.
Line 51
case "$osver" in
should be
case "$osvers" in
Missing this case leads to the functions
setregid()
setreuid()
setrgid()
setruid()
being used, leading to a security problem on all released versions
of NetBSD.
p5p-msgid:
199705051346.XAA13584@topaz.nemeton.com.au
# ($<, $>) = ($u, $u); will work (same for $(/$)). this is because
# you can not change the real userid of a process under 4.4BSD.
# netbsd fixed this in 1.2A.
-case "$osver" in
+case "$osvers" in
0.9*|1.0*|1.1*|1.2_*|1.2|1.2.*)
d_setregid="$undef"
d_setreuid="$undef"