>Number:         17657
>Category:       pkg
>Synopsis:       devel/cvsup are not updated
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Jul 19 17:47:00 PDT 2002
>Closed-Date:
>Last-Modified:
>Originator:     Sergio Jimenez
>Release:        NetBSD 1.6D
>Organization:
HispaBSD
>Environment:
System: NetBSD odin 1.6D NetBSD 1.6D (ODIN) #0: Mon Jul 8 03:39:36 CEST 2002 root@odin:/usr/src/sys/arch/i386/compile/ODIN i386
Architecture: i386
Machine: i386
>Description:
	According to audit-package, cvsup-16.1d has remote root shell bug. The pkgsrc collection hasthis version yet.
>How-To-Repeat:
	Install devel/cvsup
>Fix:
	Download from ftp://ftp.pasta.cs.uit.no/pub/cvsupd/pkgsrc/ , "cvsup.tar.gz" and "ezm3.tar.gz", extract it into your pkgsrc tree and "make update" it. Other way to fix the problem is that somebody could submit this two pkgsrc's.
>Release-Note:
>Audit-Trail:
>Unformatted: