You are not logged in.
hm, I can't see this in the @tech-security maillist and not on http://www.NetBSD.org/Security either.
The NetBSD Security Officer team are probably in the middle of writing an Security Advisory for this issue - it will eventually show up sooner or later.
A little update on this topic;
The security advisory hasn't been issued yet due to lack of resources on the Security Officer team, that's all I can report for now and hopefully we'll see it in the near future.