Sorry to interrupt discussions about working/non-working yum and apt for RH8 but today RHSA-2004:153-01 came out with new security fixes for CVS. See https://bugzilla.fedora.us/show_bug.cgi?id=1485 for Legacy angle but in short recompiling source rpms mentioned in the Red Hat advisory should be just it. Michal