[sr #110945] The cvsweb program is not maintained anymore since 2014.

[GNUtoo]

URL:
  <https://savannah.nongnu.org/support/?110945>

                 Summary: The cvsweb program is not maintained anymore since
2014.
                   Group: Savannah Administration
               Submitter: gnutoo
               Submitted: Thu 19 Oct 2023 11:48:51 PM UTC
                Category: None
                Priority: 5 - Normal
                Severity: 3 - Normal
                  Status: None
             Assigned to: None
        Originator Email: 
        Operating System: None
             Open/Closed: Open
         Discussion Lock: Any


    _______________________________________________________

Follow-up Comments:


-------------------------------------------------------
Date: Thu 19 Oct 2023 11:48:51 PM UTC By: GNUtoo <gnutoo>
Hi,

Savannah uses cvsweb to show cvs websites.

In 2014 FreeBSD stopped maintaining cvsweb[1] and warned that "There may be
unpatched security issues with [cvsweb]".

Distributions like Trisquel still assume that it's maintained by FreeBSD as
they point to the cvsweb page on the FreeBSD website[2][3], but that page was
also removed few years ago[4][5].

References:
-----------
[1]https://cgit.freebsd.org/doc/commit/?id=65402a3cc2b34ee34ddb598266b5cc30ef03d41b
[2]https://packages.trisquel.org/aramo/cvsweb
[3]http://www.freebsd.org/projects/cvsweb.html
[4]https://reviews.freebsd.org/D22957
[5]https://reviews.freebsd.org/file/data/2aucwpp5owujyob55met/PHID-FILE-pl362nfyqoek4ostdpdp/D22957.diff

Denis.







    _______________________________________________________

Reply to this item at:

  <https://savannah.nongnu.org/support/?110945>

_______________________________________________
Message sent via Savannah
https://savannah.nongnu.org/