<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "http://bugs.gentoo.org/bugzilla.dtd">

<bugzilla version="2.22.7"
          urlbase="http://bugs.gentoo.org/"
          maintainer="bugzilla@gentoo.org"
>

    <bug>
          <bug_id>89579</bug_id>
          
          <creation_ts>2005-04-18 14:12 0000</creation_ts>
          <short_desc>dev-util/cvs Multiple DoS issues</short_desc>
          <delta_ts>2005-08-15 21:58:33 0000</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>Gentoo Security</product>
          <component>Vulnerabilities</component>
          <version>unspecified</version>
          <rep_platform>All</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          <status_whiteboard>B3 [glsa] jaervosz</status_whiteboard>
          
          <priority>P2</priority>
          <bug_severity>minor</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          
          <everconfirmed>1</everconfirmed>
          <reporter>jaervosz@gentoo.org</reporter>
          <assigned_to>security@gentoo.org</assigned_to>
          <cc>pylon@gentoo.org</cc>

      

      
          <long_desc isprivate="0">
            <who>jaervosz@gentoo.org</who>
            <bug_when>2005-04-18 14:12:04 0000</bug_when>
            <thetext>CVS Changelog entries for 2005-03-17 some of the initial issues reported are not fixed in kclockwork patch but in the public CVS tree:

https://ccvs.cvshome.org/source/browse/ccvs/src/ChangeLog?rev=1.3170&amp;content-type=text/vnd.viewcvs-markup

Another issue:

https://ccvs.cvshome.org/issues/show_bug.cgi?id=224</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>jaervosz@gentoo.org</who>
            <bug_when>2005-04-18 14:12:57 0000</bug_when>
            <thetext>Pylon please advise.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>jaervosz@gentoo.org</who>
            <bug_when>2005-04-19 12:38:04 0000</bug_when>
            <thetext>1.11.20 is released. Pylon please bump.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>pylon@gentoo.org</who>
            <bug_when>2005-04-19 16:22:58 0000</bug_when>
            <thetext>I added cvs-1.11.20 and cvs-1.12.12 into portage.  Arches should test and make cvs-1.11.20 stable.

cvs-1.11.20:
current KEYWORDS=&quot;~x86 ~ppc ~sparc ~mips ~alpha ~arm ~hppa ~amd64 ~ia64 ~ppc64 ~s390&quot;
target  KEYWORDS=&quot;x86 ppc sparc mips alpha arm hppa amd64 ia64 ppc64 s390&quot;


cvs-1.12.12:
current KEYWORDS=&quot;~x86 ~ppc ~sparc ~mips ~alpha ~arm ~hppa ~amd64 ~ia64 ~ppc64 ~s390&quot;
target nothing to be done here</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>lewk@gentoo.org</who>
            <bug_when>2005-04-19 17:32:30 0000</bug_when>
            <thetext>arches, please mark cvs-1.11.20 stable.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>gustavoz@gentoo.org</who>
            <bug_when>2005-04-19 18:01:14 0000</bug_when>
            <thetext>sparc stable.
</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>corsair@gentoo.org</who>
            <bug_when>2005-04-19 23:42:01 0000</bug_when>
            <thetext>stable on ppc64</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>pylon@gentoo.org</who>
            <bug_when>2005-04-20 00:38:24 0000</bug_when>
            <thetext>Stable on ppc and x86.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>blubb@gentoo.org</who>
            <bug_when>2005-04-20 09:47:52 0000</bug_when>
            <thetext>amd64 done</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>gmsoft@gentoo.org</who>
            <bug_when>2005-04-20 13:06:08 0000</bug_when>
            <thetext>Stable on hppa.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>kloeri@gentoo.org</who>
            <bug_when>2005-04-20 14:46:32 0000</bug_when>
            <thetext>Stable on alpha + ia64.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>jaervosz@gentoo.org</who>
            <bug_when>2005-04-22 04:51:17 0000</bug_when>
            <thetext>Resolved with GLSA 200504-16 Update

arm, mips, s390 remember to mark stable to benifit from the GLSA Update.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>kumba@gentoo.org</who>
            <bug_when>2005-06-29 19:18:01 0000</bug_when>
            <thetext>cvs-1.11.20 stable on mips.</thetext>
          </long_desc>
      
    </bug>

</bugzilla>