patch for cvs security issue available
"Todd C. Miller" <[email protected]>
| Newsgroups | gmane.os.openbsd.security.announce |
|---|---|
| Message-ID | <[email protected]> |
There is a double free in cvs that could allow an attacker to execute
code with the privileges of the user running cvs. This is only an
issue when the cvs command is being run on a user's behalf as a
different user. This means that, in most cases, the issue only
exists for cvs configurations that use the "pserver" client/server
connection method. If you use cvs via ssh then there is no privilege
to escalate.
OpenBSD anoncvs mirrors should not be affected by this since cvs
is run in a chrooted environment where the anoncvs user does not
have write permission.
Credit goes to Stefan Esser for finding this issue.
Patch for OpenBSD 3.2:
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.2/common/006_cvs.patch
Patch for OpenBSD 3.1:
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/020_cvs.patch
The 3.2-stable branch has been updated with the patch and the
3.1-stable branch will be updated shortly.
- todd