When one emerges x11-wm/WindowMaker, and Portage claims Latest Version Installed is 0.80.2, the version in the package built is in actuality 0.80.1, containing the unchecked buffer bug. The source package should either be updated to 0.80.2, or the Portage tree should be updated to reflect that the package is actually version 0.80.1.
verifying this right now.
I just redownloaded the 0.80.2 source and it matched the checksum of the current build in portage. I also did a diff of the 0.80.1 to the 0.80.2 source ns1 WindowMaker # diff -urN files/digest-WindowMaker-0.80.1-r2 files/digest-WindowMaker-0.80.2 --- files/digest-WindowMaker-0.80.1-r2 2002-07-06 01:24:04.000000000 -0500 +++ files/digest-WindowMaker-0.80.2 2002-11-10 03:32:33.000000000 -0600 @@ -1,2 +1,2 @@ -MD5 b1c88c8ecb8f4484d0ae953b9a730418 WindowMaker-0.80.1.tar.gz 2503965 +MD5 e4b71ee2b35a4e16b371ab9595e7335f WindowMaker-0.80.2.tar.gz 2532831 MD5 07c7700daaaf232bc490f5abaabef085 WindowMaker-extra-0.1.tar.gz 238018 ns1 WindowMaker # There are obviously differences in the source as md5 sums are different and files sizes are different... I didn't get into the actual source changes here as this should be enough proving of difference.