Vulnerable: version 1.12.13nb9 is affected by 5 known vulnerabilities. See below.

devel/scmcvs 1.12.13nb9 NetBSD

Concurrent Versions System

System: NetBSD
Repository: pkgsrc
Maintainer: [email protected]
Last update: 2026-09-26
Commit: a64d76db82
License: gnu-gpl-v2
Categories: devel, scm
Package size: 545.1 KiB, 1793.8 KiB installed

Description

CVS is a version control system, which allows you to keep old versions of files (usually source code), keep a log of who, when, and why changes occurred, etc., like RCS or SCCS. It handles multiple developers, multiple directories, triggers to enable/log/control various operations, and can work over a wide area network.

In the other systems

The newest version among them is 1.20120905, as upstream numbers it.

System

Port

Version

Vulnerabilities

Status

Maintainer

Last update

NetBSD

devel/scmcvs

1.12.13nb9

5 known

[email protected]

2026-09-26

FreeBSD

devel/cvs by name

1.20120905_9 newest

none known

[email protected]

MidnightBSD

devel/cvs by name

1.20120905_7 newest

no data

[email protected]

GhostBSD

devel/cvs by name

1.20120905_9 newest

no data

[email protected]

Compare across BSDs

Install

Binary package:

pkgin install cvs

From pkgsrc:

cd /usr/pkgsrc/devel/scmcvs && make install clean

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repository

Version

NetBSD 10.1 x86_64

1.12.13nb9

NetBSD 10.1 aarch64

1.12.13nb9

SmartOS / illumos x86_64

1.12.13nb9

macOS 15 arm64

1.12.13nb9

Dependencies

No port depends on this one.

Known vulnerabilities 5

Commit history 2

Date Commit Credits Log message

2026-09-26 a64d76db82 hubertf Make this build e.g. on macOS, see PR pkg/60769 for details.

2026-07-04

89f762bd31

gdt

devel/scmcvs: Use autoconf269 to avoid C23

Use autoconf269 as a tool, rather than autoconf, because devel/autoconf recently looks for and enables --std=c23 when configure.ac asks for C. Autoconf sees this as a feature, it seems, while some pkgsrc people see it as a bug (vs having the package ask for the specific dialect that the program is written in.) Other suggestions have been floated - generate once with old autoconf, patch configure with that output, and drop the autoconf tool - Adjust compiler support so --std=c23 is an error if c23 is not in USE_CC_FEATURES. but using older (but not ancient) autoconf is a small change that works around the current issue, and does not make larger fixes harder. No PKGREVISION++, because this is all about avoiding build failures. …