|
|
CVS Client RCS Diff File Corruption Vulnerability
Solution: The vendor has released updates to address this and other issues. Fixes are linked below. SGI has released an advisory 20040404-01-U and fixes to address this issue. Please see referenced advisory for further details regarding obtaining and applying appropriate fixes. Fixes are linked below. FreeBSD has released an advisory (FreeBSD-SA-04:07.cvs) and patches to address this issue. FreeBSD users are advised to apply these patches as soon as possible. Further information regarding obtaining and applying patches can be found in the referenced advisory. Patches are linked below. Red Hat has released an advisory (RHSA-2004:154-06) and fixes to address this issue. Red Hat users are advised to apply these fixes as soon as possible. Further information regarding obtaining and applying fixes can be found in the referenced advisory. OpenPKG has released an advisory (OpenPKG-SA-2004.013) and fixes to address this issue. OpenPKG users are advised to apply these fixes as soon as possible. Further information regarding obtaining and applying fixes can be found in the referenced advisory. Fixes are linked below. Red Hat has released an advisory (RHSA-2004:153-07) and fixes to address this issue on Red Hat Linux Enterprise platforms. Customers who are affected by this issue are advised to apply the appropriate updates. Customers subscribed to the Red Hat Network may apply the appropriate fixes using the Red Hat Update Agent (up2date). Please see referenced advisory for additional information. SuSE has released an advisory (SuSE-SA:2004:008) and fixes to address this issue. SuSE users are advised to apply these fixes as soon as possible. Further information regarding obtaining and applying fixes can be found in the referenced advisory. Red Hat has released an advisory (RHSA-2004:154-01) and fixes to address this issue. Red Hat users are advised to apply these fixes as soon as possible. Further information regarding obtaining and applying fixes can be found in the referenced advisory. Mandrake has released an advisory (MDKSA-2004:028) and fixes to address this issue. Mandrake users are advised to apply these fixes as soon as possible. Further information regarding obtaining and applying fixes can be found in the referenced advisory. Gentoo has released an advisory GLSA 200404-13 to address this and another issue. Please see the referenced advisory for more information. Gentoo users are advised to carry out the following commands to update their systems: # emerge sync # emerge -pv ">=dev-util/cvs-1.11.15" # emerge ">=dev-util/cvs-1.11.15" Debian has released advisory DSA 486-1 to address this issue. Please see the attached advisory for details on obtaining and applying fixes. Netwosix has released an advisory LNSA-#2004-0011 with fix information to address this and another issue in CVS. Please see the referenced advisory for more information. Slackware has released an advisory SSA:2004-108-02 with fix information to address this and another issue in CVS. Please see the referenced advisory for more information. Red Hat has released advisory RHSA-2004:153-09 for their enterprise distribution dealing with this and other issues. Please see the referenced advisory for more information and details on obtaining fixes. OpenBSD users are urged to follow the instructions contained in the patch files to update their CVS binaries. Red Hat Fedora has released advisory FEDORA-2004-110 dealing with this issue. Please see the referenced advisory for further information. SGI has released an advisory (20040506-01-U) with Patch 10075 for SGI ProPack 3 to address this and other issues. Please see the referenced advisory for more information. Turbolinux has released advisory TLSA-2004-15 dealing with this issue. Please see the referenced advisory for further information. Red Hat Fedora Legacy advisory FLSA-2004:1620 has been released dealing with this and other issues for Red Hat 7.3 and 9.0. Please see the referenced advisory for more information. An upgrade for CVS on the Immunix Linux platform has been released. Red Hat Fedora Core1
CVS CVS 1.11
CVS CVS 1.11.1 p1
CVS CVS 1.11.1
CVS CVS 1.11.10
CVS CVS 1.11.11
CVS CVS 1.11.14
CVS CVS 1.11.2
CVS CVS 1.11.3
CVS CVS 1.11.4
CVS CVS 1.11.5
CVS CVS 1.11.6
CVS CVS 1.12.1
CVS CVS 1.12.2
CVS CVS 1.12.5
SGI ProPack 2.3
SGI ProPack 2.4
SGI ProPack 3.0
FreeBSD FreeBSD 4.8 -RELENG
FreeBSD FreeBSD 4.8 -PRERELEASE
FreeBSD FreeBSD 4.8 -RELEASE-p7
FreeBSD FreeBSD 4.8
FreeBSD FreeBSD 4.9
FreeBSD FreeBSD 4.9 -PRERELEASE
|
|
Privacy Statement |