Security Issues with TortoiseCVS

Just a quick reminder that the 'old' versions of CVSNT shipped with
TortoiseCVS and WinCVS have known security vulnerabilities:
https://www.march-hare.com/cvspro/security.htm

CVSNT is the software that actually does the 'checkout' and 'commit'
operations - you can 'see' it running in the 'progress' window in
TortoiseCVS.  CVSNT client is bundled with TortoiseCVS.  TortoiseCVS is
the 'GUI' that gives you the right click menu and dialog boxes.
TortoiseCVS itself does not do any version control, that's what the
CVSNT client is doing.

In particular the CVSNT client (and hence TortoiseCVS) is susceptible to
the recent 'FREAK' SSL bug.  CVSNT servers are also affected:
https://www.march-hare.com/cvspro/freak.htm

CVS Suite 2009R2 (CVSNT 2.8.01) was updated on 30th March 2015 to
resolve this.  

CVS Suite 2009R2 client contains TortoiseCVS, WinCVS, CVS Suite Studio,
Release Manager etc. and is compatible with Windows 8, Windows 7,
Windows Vista and Windows XP.

CVS Suite 2009R2 command line client is compatible with Linux, Mac and
Windows.

CVS Suite 2009R2 server contains the high performance server service,
integration with Jira, Bugzilla and Mantis, failsafe audit, change and
merge tracking and is compatible with Linux, Mac, and Windows Server
2012R2, Windows Server 2012, Windows Server 2008R2, Windows Server 2008
and Windows Server 2003.

For more information please contact support-qn/[email protected]

Regards,


Arthur Barrett
Product Manager
March Hare Software
authors of CVSNT since 2004

------------------------------------------------------------------------------
BPM Camp - Free Virtual Workshop May 6th at 10am PDT/1PM EDT
Develop your own process in accordance with the BPMN 2 standard
Learn Process modeling best practices with Bonita BPM through live exercises
http://www.bonitasoft.com/be-part-of-it/events/bpm-camp-virtual- event?utm_
source=Sourceforge_BPM_Camp_5_6_15&utm_medium=email&utm_campaign=VA_SF