Re: Open-source defect reaches deep: 23-Jan-2003 Article on news.com

[Mark D. Baushke]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Paras jain <address@hidden> writes:

>    We as a company are moving from PVCS to CVS and one of our friend
> found below one article (A server bug in CVS)!
> 
>     Is this bug published at "http://news.com.com/2100-1001-981830.html";
> 
>  still in CVS or if removed then in which version it is removed?

That particular bug was fixed long ago in release cvs 1.11.5

http://security.e-matters.de/advisories/012003.html?SID=b4801f2357e23eed85e0a91c4aa3d251

> Please provide some light on it as it looks very severe?

Read http://cvshome.org/ Look for 'Recent CVS news' and see what is
happening in the world of cvs.

Reading security disclosures that are over 21 months old is hardly the
way to keep up-to-date.

        -- Mark



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (FreeBSD)

iD8DBQFBgJ//3x41pRYZE/gRAhoJAJ0dmusQN2/UY7pTeEZpdTDLFyMJ+wCdEJ6U
0UkVHg7MGehndp7mghuGXL0=
=gDNc
-----END PGP SIGNATURE-----