dev-vcs/cvs: Fix command injection (CVE-2017-12836).
authorHanno <hanno@gentoo.org>
Sat, 26 Aug 2017 15:51:54 +0000 (17:51 +0200)
committerHanno <hanno@gentoo.org>
Sat, 26 Aug 2017 15:51:54 +0000 (17:51 +0200)
commit9aae21baa940cba64b9ca3b26a5cdf69e88fdf2b
tree641ca619b6a0a850432e9967104c53014793d023
parentb21782724ea54e39a4db12e3e22d8280487f5344
dev-vcs/cvs: Fix command injection (CVE-2017-12836).

Patch taken from MirBSD (excluding comment-only changes that
didn't apply cleanly). See bug #627498.

Package-Manager: Portage-2.3.8, Repoman-2.3.3
dev-vcs/cvs/cvs-1.12.12-r12.ebuild [new file with mode: 0644]
dev-vcs/cvs/files/cvs-1.12.12-CVE-2017-12836-commandinjection.patch [new file with mode: 0644]