Debian Security Advisory DSA 742-1 - Derek Price, the current maintainer of CVS, discovered a buffer overflow in the CVS server, that serves the popular Concurrent Versions System, which could lead to the execution of arbitrary code.
1eb72c0ea613bdc328be8e8128bd6abb28b8eb9e5a68e41cbdc6a722fae95bca
Gentoo Linux Security Advisory GLSA 200504-16 - Alen Zukich has discovered several serious security issues in CVS, including at least one buffer overflow (CVE-2005-0753), memory leaks and a NULL pointer dereferencing error. Versions less than 1.11.18-r1 are affected.
71478e23debfee6f1ab5821db6951480baef1646b37e0cc240ba3d846f7ea1d5
SUSE Security Announcement - Buffer overflow and memory access problems in cvs have been resolved.
4b23470fb0f1f14f3c0b7f6233c3e4361366bfe8d7adeb4be398791764f24e71