Red Hat Security Advisory

RHSA-2010:0918

cvs security update

Released 2010-11-29 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) cvs-1.11.23-11.el6_0.1
Red Hat Enterprise Linux HPC Node (v. 6) cvs-1.11.23-11.el6_0.1
Red Hat Enterprise Linux Server (v. 6) cvs-1.11.23-11.el6_0.1
Red Hat Enterprise Linux Workstation (v. 6) cvs-1.11.23-11.el6_0.1

Fixes 1 record

TI-2010-03653 CVE-2010-3846 · GHSA-xxxv-8qg4-6qv9

Array index error in the apply_rcs_change function in rcs.c in CVS 1.11.23 allows local…

LOW 31

Array index error in the apply_rcs_change function in rcs.c in CVS 1.11.23 allows local users to gain privileges via an RCS file containing crafted delta fragment changes that trigger a heap-based buffer overflow.

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00396 Published 2010-11-05 Fixed CWE-119