Changelog for cvs-contrib-1.11.23-owl2.x86_64.rpm :

* Tue Nov 30 2010 Vasiliy Kulikov 1.11.23-owl2- Backported upstream fix for a remote privilege escalation (CVE-2010-3846).
* Sat May 10 2008 Dmitry V. Levin 1.11.23-owl1- Updated to 1.11.23.
* Mon Oct 08 2007 Dmitry V. Levin 1.11.22-owl1- Updated to 1.11.22.
* Tue Feb 07 2006 Solar Designer 1.11.21-owl2- Fixed a NULL pointer dereference in client.c which would occur on commitsfrom a tree lacking a CVS/Root file.
* Mon Nov 14 2005 Dmitry V. Levin 1.11.21-owl1- Updated to 1.11.21.
* Thu Sep 29 2005 Dmitry V. Levin 1.11.20-owl1- Updated to 1.11.20.- Reviewed Owl patches, removed obsolete ones.- Imported a bunch of patches from ALT\'s cvs-1.11.20-alt2 package, including:change of external program from rsh to ssh for :ext: access method;LocalKeyword and KeywordExpand support like in cvs-1.12.x;CVS_LOCAL_BRANCH_NUM variable support like in cvs-1.12.x;global cvsrc file (/etc/cvs/cvsrc) support;tagloginfo support;- Corrected info files installation.
* Sat Sep 11 2004 Solar Designer 1.11.5-owl8- Use RPM\'s exclude macro on info dir file.
* Thu Jun 03 2004 Solar Designer 1.11.5-owl7- Added back-ports of further CVS security fixes to CAN-2004-0414,CAN-2004-0416, CAN-2004-0417, CAN-2004-0418, and to some minor bugs whichdidn\'t appear to deserve CVE names. Thanks to Stefan Esser, SebastianKrahmer, and Derek Robert Price for finding and fixing these.
* Tue May 18 2004 Solar Designer 1.11.5-owl6- Added Derek Robert Price\'s fix for the CVS server heap-based bufferoverflow vulnerability in processing of malformed \"Entry\" lines incombination with \"Is-modified\" and \"Unchanged\" discovered by Stefan Esser.
* Tue Apr 13 2004 Michail Litvak 1.11.5-owl5- Patch to fix CVS pserver client side remote exploit.- Fixed that using the -p option to cvs checkout sidesteps thecheck that verifies the path isn\'t outside the repository.
* Fri Dec 12 2003 Solar Designer 1.11.5-owl4- Back-ported a patch from CVS 1.11.10 to reject absolute module paths.
* Sat Jun 28 2003 Solar Designer 1.11.5-owl3- Updated the canonicalize patch to avoid using _GNU_SOURCE but ratherdeclare the prototype for canonicalize_file_name() explicitly. With_GNU_SOURCE, we could get function prototype conflicts on certain otherglibc functions that cvs overrides (this actually caused the package tonot build on Alpha).- Handle the special case when the last path component doesn\'t yet existand thus can\'t be canonicalized.
* Thu May 01 2003 Solar Designer 1.11.5-owl2- BuildRequires: mktemp >= 1:1.3.1 (but don\'t yet require mktemp for thepackage itself because it won\'t be needed for most uses; the scripts willneed to be moved to a subpackage).- Don\'t let the cvsbug script unlink one of its temporary files and thenre-use its name.- Moved the documentation and contributed scripts into subpackages.
* Thu May 01 2003 Solar Designer 1.11.5-owl1- Re-worked the temporary file handling patch to make it actually do whatit was supposed to and cover more scripts and the documentation.- Force configure to use /tmp for the default temporary file directory,and not pick and store $TMPDIR that was set at build time.- Use vitmp with cvsbug, rcs-to-cvs, and cvs itself.- Enable mkstemp explicitly, not rely on configure.- Patched 47 gcc -Wall warnings (all of them), including some real bugs.- Patched cvs to not create world-writable files (val-tags, dbm).- Canonicalize paths to avoid a failed assertion on \"cvs rdiff\" and maybeother commands if $CVSROOT contains symlinks.- chmod -x most scripts in contrib/ to prevent bogus dependencies on perland csh.
* Mon Mar 24 2003 Simon B 1.11.5-owl0.1- Pulled in mktemp fixes from ALT Linux- Disable {Checkin,Update}-prog- General tidying up based on suggestions from Solar Designer
* Fri Mar 14 2003 Simon B - initial Owl spec file- compile CVS dynamically against zlib instead of using the versionincluded with the CVS source.