On Thursday, April 13, Pavel Roskin wrote:
> 
> PS. Nowadays when anonymous CVS is so widespread, it's yet to be seen how
> many security holes are still in CVS. Maybe we should ask OpenBSD guys to
> examine CVS for buffer overflows and other security issues.

Ouch!  Ouch!  I've looked at CVS some, and it is not "easy", nor
particularly "pleasant" to audit.

--Toby.

Reply via email to