??changed: -* CVS (vcs-noshell): prevent use of CVSROOT/passwd, restrict accessible CVSROOTs under /sources and /web (instead of listing each and every 2700 existing CVSROOTs). Those changes (at least the latest) should be properly merged in CVS, see CvS. Given that CVS development is dead, there's essentially no maintenance cost. * CVS (vcs-noshell): prevent use of CVSROOT/passwd, restrict accessible CVSROOTs under /sources and /web (instead of listing each and every 2700 existing CVSROOTs). Those changes (at least the latest) should be properly merged in CVS, see [CVS]. Given that CVS development is dead, there's essentially no maintenance cost.
-- forwarded from http://savannah.gnu.org/maintenance/ManuallyInstalledPackages#msg20120818042521+0...@savannah.gnu.org/maintenance
