File _patchinfo of Package patchinfo.5527
<patchinfo incident="5527">
<issue id="1053364" tracker="bnc">VUL-0: CVE-2017-12836: cvs: client code execution via argument injection in SSH URL</issue>
<issue id="2017-12836" tracker="cve" />
<category>security</category>
<rating>moderate</rating>
<description>This update for cvs fixes the following issues:
- CVE-2017-12836: A leading dash in the argument of the "-d" option could lead to argument injection (bsc#1053364)
</description>
<summary>Security update for cvs</summary>
<packager>jmoellers</packager>
<name>cvs</name>
</patchinfo>