Hash: SHA256

Package        : cvs
Version        : 2:1.12.13+real-9+deb7u1
CVE ID         : CVE-2017-12836
Debian Bug     : #871810

It was discovered that there was a command injection vulnerability in the CVS
revision control system.

For Debian 7 "Wheezy", this issue has been fixed in cvs version
2:1.12.13+real-9+deb7u1.

We recommend that you upgrade your cvs packages. Thanks to Thorsten Glaser
 for preparing and testing this upload.


Regards,

- -- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

Debian LTS: DLA-1056-1: cvs security update

August 13, 2017
It was discovered that there was a command injection vulnerability in the CVS revision control system

Summary

For Debian 7 "Wheezy", this issue has been fixed in cvs version
2:1.12.13+real-9+deb7u1.

We recommend that you upgrade your cvs packages. Thanks to Thorsten Glaser
for preparing and testing this upload.


Regards,

- --
,''`.
: :' : Chris Lamb
`. `'` lamby@debian.org / chris-lamb.co.uk
`-



Severity
Package : cvs
Version : 2:1.12.13+real-9+deb7u1
CVE ID : CVE-2017-12836
Debian Bug : #871810

Related News