Bug 118779

Summary:	CAN-2003-0977 fix pushed for RH9, but not FC1
Product:	[Fedora] Fedora	Reporter:	Peter E. Popovich <redhat>
Component:	cvs	Assignee:	Nalin Dahyabhai <nalin>
Status:	CLOSED ERRATA	QA Contact:	Ben Levenson <benl>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	1	CC:	aleksey, redhat-bugzilla
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2004-05-06 09:37:55 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	120969
Bug Blocks:

Description Peter E. Popovich 2004-03-20 05:15:21 UTC

Description of problem:
CAN-2003-0977 fix pushed for RH9, but not FC1

Version-Release number of selected component (if applicable):
cvs-1.11.5-3

Additional info:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=111221#c5
https://rhn.redhat.com/errata/RHSA-2004-003.html
http://ccvs.cvshome.org/servlets/NewsItemView?newsID=84
http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0081.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0977

Comment 1 Robert Scheck 2004-03-20 17:44:26 UTC

A rebuild from cvs-1.11.11-1 (or higher) from Fedora Development 
at Fedora Core 1 solves the problem, so maybe one of the Red Hat 
maintainers could do that? Would be very nice :)

BTW: Maybe the kerberos 4 support has to be disabled.

Comment 2 Robert Scheck 2004-04-15 18:34:28 UTC

Maybe that issue is fixed soon by one of the lazy maintainers with the 
current issue (see bug dependency)... :-(

Comment 3 Robert Scheck 2004-04-22 18:18:45 UTC

Fixed with the current update from bug #120969 so this bug can be
closed.