Sorry to interrupt discussions about working/non-working yum and apt for RH8 but today RHSA-2004:153-01 came out with new security fixes for CVS. See https://bugzilla.fedora.us/show_bug.cgi?id=1485 for Legacy angle but in short recompiling source rpms mentioned in the Red Hat advisory should be just it. Michal -- fedora-legacy-list@xxxxxxxxxx http://www.redhat.com/mailman/listinfo/fedora-legacy-list