summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRepository QA checks <repo-qa-checks@gentoo.org>2017-09-28 21:53:03 +0000
committerRepository QA checks <repo-qa-checks@gentoo.org>2017-09-28 21:53:03 +0000
commit03619be4893b3bd25add61c55408ba70b27336f4 (patch)
treeaf74c9a3923f47cead53c77a3317b9a80b6b2f42 /metadata/glsa/glsa-200406-06.xml
parentMerge updates from master (diff)
parentGLSA format update (diff)
downloadgentoo-03619be4893b3bd25add61c55408ba70b27336f4.tar.gz
gentoo-03619be4893b3bd25add61c55408ba70b27336f4.tar.bz2
gentoo-03619be4893b3bd25add61c55408ba70b27336f4.zip
Merge commit '612f47deca97e8d7ffc2100c1dbc82a602abdf39'
Diffstat (limited to 'metadata/glsa/glsa-200406-06.xml')
-rw-r--r--metadata/glsa/glsa-200406-06.xml21
1 files changed, 10 insertions, 11 deletions
diff --git a/metadata/glsa/glsa-200406-06.xml b/metadata/glsa/glsa-200406-06.xml
index bb2d802e15fa..ac1c3ca68e80 100644
--- a/metadata/glsa/glsa-200406-06.xml
+++ b/metadata/glsa/glsa-200406-06.xml
@@ -1,6 +1,5 @@
<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd">
-
<glsa id="200406-06">
<title>CVS: additional DoS and arbitrary code execution vulnerabilities</title>
<synopsis>
@@ -8,8 +7,8 @@
an attacker to remotely compromise a CVS server.
</synopsis>
<product type="ebuild">CVS</product>
- <announced>June 10, 2004</announced>
- <revised>June 10, 2004: 01</revised>
+ <announced>2004-06-10</announced>
+ <revised>2004-06-10: 01</revised>
<bug>53408</bug>
<access>remote</access>
<affected>
@@ -31,8 +30,8 @@
vulnerabilities including:
</p>
<ul>
- <li>no-null-termination of &quot;Entry&quot; lines</li>
- <li>error_prog_name &quot;double-free()&quot;</li>
+ <li>no-null-termination of "Entry" lines</li>
+ <li>error_prog_name "double-free()"</li>
<li>Argument integer overflow</li>
<li>serve_notify() out of bounds writes</li>
</ul>
@@ -56,15 +55,15 @@
<code>
# emerge sync
- # emerge -pv ">=dev-util/cvs-1.11.17"
- # emerge ">=dev-util/cvs-1.11.17"</code>
+ # emerge -pv "&gt;=dev-util/cvs-1.11.17"
+ # emerge "&gt;=dev-util/cvs-1.11.17"</code>
</resolution>
<references>
<uri link="http://security.e-matters.de/advisories/092004.html">E-matters Advisory 09/2004</uri>
- <uri link="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0414">CAN-2004-0414</uri>
- <uri link="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0416">CAN-2004-0416</uri>
- <uri link="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0417">CAN-2004-0417</uri>
- <uri link="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0418">CAN-2004-0418</uri>
+ <uri link="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0414">CAN-2004-0414</uri>
+ <uri link="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0416">CAN-2004-0416</uri>
+ <uri link="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0417">CAN-2004-0417</uri>
+ <uri link="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0418">CAN-2004-0418</uri>
</references>
<metadata tag="submitter">
jaervosz