Slashdot Mirror
OpenBSD Project Will Release OpenCVS
thequbemaster writes "The OpenBSD project, responsible for OpenSSH, OpenBGPD, and OpenNTPD, has created OpenCVS, a BSD licensed implementation of CVS client and server. From the site: 'It aims to be as compatible as possible with other CVS implementations, except when particular features reduce the overall security of the system. The OpenCVS project was started after discussions regarding the latest GNU CVS vulnerabilities that came out. Although CVS is widely used, its development has been mostly stagnant in the last years and many security issues have popped up, both in the implementation and in the mechanisms.' No releases are available yet. The README in the OpenCVS CVS repository states that the server is not ready yet, but looks like the client is usable." Update: 12/15 20:18 GMT by T : This project was mentioned briefly the other day, too.
They take what amounts to a standard set of hacks on top of RCS. Then they make a port of it with a BSD license. Then... we're supposed to believe this is a good thing?
Subversion and arch would be better models wouldn't they? Hell, subversion has an Apache-style license to it. Closer to BSD than GNU CVS's GPL *and* Subversion is better than CVS right now.
I'm more than grateful to the OpenBSD project for their work on free firewall implementations, openssl, openssh, etc. But enough's enough. CVS? Aim a little fucking higher guys!
- I don't need to go outside, my CRT tan'll do me just fine.
I hope they do a better job with CVS then when they botched implementing NTP