Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2017:2483-1

Опубликовано: 15 сент. 2017
Источник: suse-cvrf

Описание

Security update for cvs

This update for cvs fixes the following issues:

  • CVE-2017-12836: A leading dash in the argument of the '-d' option could lead to argument injection (bsc#1053364)

This update was imported from the SUSE:SLE-12:Update update project.

Список пакетов

openSUSE Leap 42.2
cvs-1.12.12-188.1
cvs-doc-1.12.12-188.1
openSUSE Leap 42.3
cvs-1.12.12-188.1
cvs-doc-1.12.12-188.1

Ссылки

Описание

CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository URL with a crafted hostname, as demonstrated by "-oProxyCommand=id;localhost:/bar."

Затронутые продукты
openSUSE Leap 42.2:cvs-1.12.12-188.1
openSUSE Leap 42.2:cvs-doc-1.12.12-188.1
openSUSE Leap 42.3:cvs-1.12.12-188.1
openSUSE Leap 42.3:cvs-doc-1.12.12-188.1
Ссылки