Ubuntu 14.04 LTS / 16.04 LTS : cvs vulnerability (USN-3399-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3399-1 advisory. Hank Leininger discovered that cvs did not properly handle SSH for remote repositories. A remote attacker could use this to construct a cvs repository...