Debian Security Update DSA-3940 cvs - security update

[LinuxBot]

It was discovered that CVS, a centralised version control system, did not correctly handle maliciously constructed repository URLs, which allowed an attacker to run an arbitrary shell command.

Continue reading...