(RHSA-2012:0321) Moderate: cvs security update

2012-02-2100:00:00

access.redhat.com

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.007 Low

EPSS

Percentile

78.8%

JSON

Concurrent Version System (CVS) is a version control system that can record
the history of your files.

A heap-based buffer overflow flaw was found in the way the CVS client
handled responses from HTTP proxies. A malicious HTTP proxy could use this
flaw to cause the CVS client to crash or, possibly, execute arbitrary code
with the privileges of the user running the CVS client. (CVE-2012-0804)

All users of cvs are advised to upgrade to these updated packages, which
contain a patch to correct this issue.

OSVersionArchitecturePackageVersionFilename
RedHat6x86_64cvs< 1.11.23-11.el6_2.1cvs-1.11.23-11.el6_2.1.x86_64.rpm
RedHat5i386cvs-inetd< 1.11.22-11.el5_8.1cvs-inetd-1.11.22-11.el5_8.1.i386.rpm
RedHat6srccvs< 1.11.23-11.el6_2.1cvs-1.11.23-11.el6_2.1.src.rpm
RedHat6s390xcvs-debuginfo< 1.11.23-11.el6_2.1cvs-debuginfo-1.11.23-11.el6_2.1.s390x.rpm
RedHat5srccvs< 1.11.22-11.el5_8.1cvs-1.11.22-11.el5_8.1.src.rpm
RedHat6x86_64cvs-debuginfo< 1.11.23-11.el6_2.1cvs-debuginfo-1.11.23-11.el6_2.1.x86_64.rpm
RedHat5ppccvs-debuginfo< 1.11.22-11.el5_8.1cvs-debuginfo-1.11.22-11.el5_8.1.ppc.rpm
RedHat6ppc64cvs-debuginfo< 1.11.23-11.el6_2.1cvs-debuginfo-1.11.23-11.el6_2.1.ppc64.rpm
RedHat6i686cvs-debuginfo< 1.11.23-11.el6_2.1cvs-debuginfo-1.11.23-11.el6_2.1.i686.rpm
RedHat6ppc64cvs< 1.11.23-11.el6_2.1cvs-1.11.23-11.el6_2.1.ppc64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	6	x86_64	cvs	< 1.11.23-11.el6_2.1	cvs-1.11.23-11.el6_2.1.x86_64.rpm
RedHat	5	i386	cvs-inetd	< 1.11.22-11.el5_8.1	cvs-inetd-1.11.22-11.el5_8.1.i386.rpm
RedHat	6	src	cvs	< 1.11.23-11.el6_2.1	cvs-1.11.23-11.el6_2.1.src.rpm
RedHat	6	s390x	cvs-debuginfo	< 1.11.23-11.el6_2.1	cvs-debuginfo-1.11.23-11.el6_2.1.s390x.rpm
RedHat	5	src	cvs	< 1.11.22-11.el5_8.1	cvs-1.11.22-11.el5_8.1.src.rpm
RedHat	6	x86_64	cvs-debuginfo	< 1.11.23-11.el6_2.1	cvs-debuginfo-1.11.23-11.el6_2.1.x86_64.rpm
RedHat	5	ppc	cvs-debuginfo	< 1.11.22-11.el5_8.1	cvs-debuginfo-1.11.22-11.el5_8.1.ppc.rpm
RedHat	6	ppc64	cvs-debuginfo	< 1.11.23-11.el6_2.1	cvs-debuginfo-1.11.23-11.el6_2.1.ppc64.rpm
RedHat	6	i686	cvs-debuginfo	< 1.11.23-11.el6_2.1	cvs-debuginfo-1.11.23-11.el6_2.1.i686.rpm
RedHat	6	ppc64	cvs	< 1.11.23-11.el6_2.1	cvs-1.11.23-11.el6_2.1.ppc64.rpm