From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ian Lance Taylor To: overseers@sources.redhat.com Subject: Re: [akr@M17N.ORG: cvs security problem] Date: Sat, 30 Dec 2000 06:08:00 -0000 Message-id: <20000729005638.25669.qmail@daffy.airs.com> References: <20000728204913.24588.qmail@daffy.airs.com> X-SW-Source: 2000/msg00903.html Date: 28 Jul 2000 13:49:13 -0700 From: Ian Lance Taylor This looks like a serious security problem. It appears to open anonymous CVS servers to a wide range of attack. Actually, the current conclusion on bug-cvs is that anonymous servers are safe. Ian From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ian Lance Taylor To: overseers@sources.redhat.com Subject: Re: [akr@M17N.ORG: cvs security problem] Date: Fri, 28 Jul 2000 17:56:00 -0000 Message-ID: <20000729005638.25669.qmail@daffy.airs.com> References: <20000728204913.24588.qmail@daffy.airs.com> X-SW-Source: 2000-q3/msg00194.html Message-ID: <20000728175600.LTDaifeurwVKc2XqD6gaNNeWbPTw0lXXxbZpjoZd6gc@z> Date: 28 Jul 2000 13:49:13 -0700 From: Ian Lance Taylor This looks like a serious security problem. It appears to open anonymous CVS servers to a wide range of attack. Actually, the current conclusion on bug-cvs is that anonymous servers are safe. Ian