cvs: unauthorized file creation [LWN.net]

Package(s):

cvs

CVE #(s):

Created:

December 9, 2003

Updated:

December 17, 2003

Description:

Stable CVS 1.11.10 has been released, fixing a security issue with no known exploits (as of this writing) that could cause previous versions of CVS to attempt to create files and directories in the filesystem root. This release also fixes several issues relevant to case insensitive filesystems and some other bugs.

Alerts:

OpenPKG	OpenPKG-SA-2003.052	2003-12-17
Slackware	SSA:2003-345-01	2003-12-11
Gentoo	200312-04	2003-12-08
Mandrake	MDKSA-2003:112-1	2003-12-10
Mandrake	MDKSA-2003:112	2003-12-08

(Log in to post comments)