known bugs page omits bugs (flaws, barn doors, issues, etc)

[del Solar, Bill]

Your page https://www.cvshome.org/cyclic/cvs/rep-known.html
omits mention of the heap-based buffer overflow in cvs
http://icat.nist.gov/icat.cfm?cvename=CAN-2004-0396
which applies to versions 1.11.x through 1.11.15 and
1.12.x through 1.12.7.

Yet http://www.gnu.org/directory/cvs.html proclaims
version 1.11.11 as stable.


DISCLAIMER: This e-mail message and any attachments are intended solely for
the use of the individual or entity to which it is addressed and may contain
information that is confidential or legally privileged.  If you are not the
intended recipient, you are hereby notified that any dissemination,
distribution, copying or other use of this message or its attachments is
strictly prohibited.  If you have received this message in error, please
notify the sender immediately and permanently delete this message and any
attachments.