[cvsnt] Re: Which version of CVS is CVSNT 2.0.12 based on?

[Tony Hoyle]

On Wed, 19 May 2004 13:04:41 -0700, "Anne Bonham" <abonham at gnx.com>
wrote:

>Which version of CVS is CVSNT 2.0.12 based on?

2.0.12 dates back to November 2003, so is not likely to contain any
fixes for problems found after that.

I have never heard of this & Derek Price usually notifies me of any
relevant security problems.  A quick look at the code shows CVSNT not
to be vulnerable to this - it looks like a problem introduced after
the code forked - there's an explicit check for multiple invocations
of modified/unchanged in the code.

Tony