Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Slackware: 2004-161-01 Moderate: Cvs Buffer Overflow Threat Update

slackware
Calendar Grey June 9, 2004
Dist Slackware Esm H88
Update your CVS 1.11.17 packages on Slackware to resolve vulnerabilities and strengthen system robustness.
New cvs packages that have been upgraded to cvs-1.11.17 are available for Slackware 8.1, 9.0, 9.1, and -current to fix various security issues

Summary

Here are the details from the Slackware 9.1 ChangeLog: Wed Jun 9 11:35:15 PDT 2004 patches/packages/cvs-1.11.17-i486-1.tgz: Upgraded to cvs-1.11.17. From the cvs NEWS file: * Thanks to Stefan Esser & Sebastian Krahmer, several potential security problems have been fixed. The ones which were considered dangerous enough to catalogue were assigned issue numbers CAN-2004-0416, CAN-2004-0417, & CAN-2004-0418 by the Common Vulnerabilities and Exposures Project. Please see for more information. * A potential buffer overflow vulnerability in the server has been fixed. This addresses the Common Vulnerabilities and Exposures Project's issue CAN-2004-0414. Please see for more information. (* Security fix *)

Where Find New Packages

Updated package for Slackware 8.1:
Updated package for Slackware 9.0:
Updated package for Slackware 9.1:
Updated package for Slackware -current:

MD5 Signatures

Slackware 8.1 package: 66db824432943ba55f59a967bb873ddd cvs-1.11.17-i386-1.tgz
Slackware 9.0 package: ae99eefc6ec2e86d4957839a0bbd09d6 cvs-1.11.17-i386-1.tgz
Slackware 9.1 package: e87625033650b3cc89172931e5dd2af4 cvs-1.11.17-i486-1.tgz
Slackware -current package: 941eb35ade93da89e622cd19e852c799 cvs-1.11.17-i486-1.tgz

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: First, shut down the cvs server if you are running one. Then, upgrade the package: # upgradepkg cvs-1.11.17-i486-1.tgz Finally, restart the CVS server.

Your message here