[Bug 226088] devel/cvs: Import inofficial patch to fix CVE-2017-12836

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=226088

            Bug ID: 226088
           Summary: devel/cvs: Import inofficial patch to fix
                    CVE-2017-12836
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: freebsd-ports-bugs at FreeBSD.org
          Reporter: fk at fabiankeil.de

Created attachment 190853
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=190853&action=edit
devel/cvs: Import inofficial patch to fix CVE-2017-12836

The attached patch adds an inofficial patch to fix CVE-2017-12836
based on a patch by Thorsten Glaser:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=871810#10

The patched file had to be changed and in the first
chunk the size of rsh_argv has been extended to 16
to match Debian's upstream version.

-- 
You are receiving this mail because:
You are the assignee for the bug.