Oval Definition:oval:com.redhat.rhsa:def:20050756
Revision Date:2005-09-06Version:502
Title:RHSA-2005:756: cvs security update (Low)
Description:CVS (Concurrent Version System) is a version control system.

An insecure temporary file usage was found in the cvsbug program. It is possible that a local user could leverage this issue to execute arbitrary instructions as the user running cvsbug. The Common Vulnerabilities and Exposures project assigned the name CAN-2005-2693 to this issue.

All users of cvs should upgrade to this updated package, which includes a patch to correct this issue.
Family:unixClass:patch
Status:Reference(s):CVE-2005-2693
RHSA-2005:756-01
Platform(s):Red Hat Enterprise Linux 3
Red Hat Enterprise Linux 4
Product(s):
Definition Synopsis
  • Release Information
  • Red Hat Enterprise Linux 3 is installed
  • AND cvs is earlier than 0:1.11.2-28
  • AND cvs is signed with Red Hat master key
  • OR Package Information
  • Red Hat Enterprise Linux 4 is installed
  • AND cvs is earlier than 0:1.11.17-8.RHEL4
  • AND cvs is signed with Red Hat master key
  • BACK