|
CVS Malformed Request System Root File Creation Vulnerability
Solution: Version 1.11.10 has been released to address this issue. SGI has released an advisory 20040202-01-U to address this and other issues in SGI ProPack 2.4. Please see the referenced advisory for more information. Fixes are available below. Red Hat has released security advisory RHSA-2004:003-01 and fixes to address this issue. See referenced advisory for additional details. Gentoo has released an advisory (200312-04) to address this issue. All Gentoo Linux systems that have cvs installed should be updated to use cvs-1.11.10 or higher as follows: emerge sync emerge -pv '>=dev-util/cvs-1.11.10' emerge '>=dev-util/cvs-1.11.10' emerge clean Mandrake has released security advisory MDKSA-2003:112-1 to address this issue as well as a problem in the updates included in MDKSA-2003:112. See referenced advisory for additional details. Slackware has released security advisory SSA:2003-345-01 to address this issue. See referenced advisory for additional details. OpenPKG has released security advisory OpenPKG-SA-2003.052 to address this issue. See referenced advisory for additional details. TurboLinux has released advisory TLSA-2003-69 with fixes to address this issue. Debian has released advisory DSA-422-1 with fixes to address this issue. RedHat has released advisory RHSA-2004:003-04 with fixes to address this issue. Please see the web reference for more information. Conectiva has issued advisory CLA-2004:808 to address this issue. RedHat has released advisory RHSA-2004:004-05 with fixes to address this issue. Please see the web reference for more information. SGI has released an advisory 20040103-01-U with fixes to address this and other issues. Please see the referenced advisory for more information. RedHat has released an advisory FLSA:1207 with fixes to address this issue. Please see the referenced advisory for more information. OpenBSD users are urged to follow the instructions contained in the patch files to update their CVS binaries. RedHat cvs-1.11.2-10.i386.rpm
CVS CVS 1.10.6
CVS CVS 1.10.7
CrossWind CyberScheduler 1.10.7
CVS CVS 1.10.8
CVS CVS 1.11
CVS CVS 1.11.1 p1
CVS CVS 1.11.1
CVS CVS 1.11.2
CVS CVS 1.11.3
CVS CVS 1.11.4
CVS CVS 1.11.5
CVS CVS 1.11.6
SGI ProPack 2.3
SGI ProPack 2.4
Slackware Linux 8.1
Slackware Linux 9.0
Slackware Linux 9.1
|
|
|
Privacy Statement |
