From: Secunia Security Advisories (sec-advsecunia.com)
Date: Thu Apr 15 2004 - 10:50:30 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

TITLE:
Mandrake update for CVS

SECUNIA ADVISORY ID:
SA11375

VERIFY ADVISORY:
http://secunia.com/advisories/11375/

CRITICAL:
Moderately critical

IMPACT:
System access, Exposure of sensitive information

WHERE:
From remote

OPERATING SYSTEM:
Mandrake Linux 9.x
Mandrake Corporate Server 2.x

DESCRIPTION:
MandrakeSoft has issued updated packages for CVS. These fix two
vulnerabilities allowing malicious servers to compromise clients, and
malicious users to retrieve arbitrary files from a vulnerable
server.

For more information:
SA11368

SOLUTION:
Updated packages:

Corporate Server 2.1:
d658ef61a9bbc81fd2ceda58da96c9ef
corporate/2.1/RPMS/cvs-1.11.14-0.1.C21mdk.i586.rpm
4690e5a453680781c865506997892f9c
corporate/2.1/SRPMS/cvs-1.11.14-0.1.C21mdk.src.rpm

Corporate Server 2.1/x86_64:
fa293671fbb99b18e75f4889ab570ffd
x86_64/corporate/2.1/RPMS/cvs-1.11.14-0.1.C21mdk.x86_64.rpm
4690e5a453680781c865506997892f9c
x86_64/corporate/2.1/SRPMS/cvs-1.11.14-0.1.C21mdk.src.rpm

Mandrakelinux 9.1:
23c11c0cfc2467840bad260fbcf17368
9.1/RPMS/cvs-1.11.14-0.1.91mdk.i586.rpm
c6cdbd0d495c17c969ca762100daaaa0
9.1/SRPMS/cvs-1.11.14-0.1.91mdk.src.rpm

Mandrakelinux 9.1/PPC:
9c9fcaaec353fa9e03772b20e6557faa
ppc/9.1/RPMS/cvs-1.11.14-0.1.91mdk.ppc.rpm
c6cdbd0d495c17c969ca762100daaaa0
ppc/9.1/SRPMS/cvs-1.11.14-0.1.91mdk.src.rpm

Mandrakelinux 9.2:
3d83f5e80eaec6e01c4eebf7fabf91dc
9.2/RPMS/cvs-1.11.14-0.1.92mdk.i586.rpm
5b9e2317b68fc58fa13dc19e0f9c8231
9.2/SRPMS/cvs-1.11.14-0.1.92mdk.src.rpm

Mandrakelinux 9.2/AMD64:
7d0abb033e07d5de2796a85744ee8ba1
amd64/9.2/RPMS/cvs-1.11.14-0.1.92mdk.amd64.rpm
5b9e2317b68fc58fa13dc19e0f9c8231
amd64/9.2/SRPMS/cvs-1.11.14-0.1.92mdk.src.rpm

ORIGINAL ADVISORY:
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:028

OTHER REFERENCES:
SA11368:
http://secunia.com/advisories/11368/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]