cvs: new vulnerabilities [LWN.net]

Package(s):

cvs

CVE #(s):

CAN-2004-0414 CAN-2004-0416 CAN-2004-0417 CAN-2004-0418

Created:

June 9, 2004

Updated:

June 15, 2004

Description:

Several new vulnerabilities have been found in CVS; these include a null-termination error, a double-free vulnerability, a format-string vulnerability, and a few others; see this advisory for the details. Some of these vulnerabilities are remotely exploitable; updating soon would be a good idea.

Alerts:

Debian	DSA-519-1	2004-06-15
Whitebox	WBSA-2004:233-01	2004-06-10
Fedora	FEDORA-2004-170	2004-06-11
Fedora	FEDORA-2004-169	2004-06-11
OpenPKG	OpenPKG-SA-2004.027	2004-06-11
Gentoo	200406-06	2004-06-10
Debian	DSA-517-1	2004-06-10
Mandrake	MDKSA-2004:058	2004-06-09
Slackware	SSA:2004-161-01	2004-06-09
SuSE	SuSE-SA:2004:015	2004-06-09
Red Hat	RHSA-2004:233-01	2004-06-09

(Log in to post comments)