Re: CVS builds

--=-=-=
Content-Type: text/plain

All,

On the gnulib list there was discussion about cvs (see below) and I was
surprised it has been so long since the last cvs release.

What is the thoughts of CVS developers on release cadence?

What do people think about importing 'cvs' to git (how ironic) and do a
maintainance release fixing various low-hanging fruit and to provide the
infrastructure to support making future releases?  Basic CI could be
provided via GitLab and/or GitHub to have some confidence in the build.
I've happily been using Codeberg lately, and have been quite happy with
it, in case that is an option.

Is anyone interested in helping?

The cvs source code on Savannah seems unavailable, so I have no idea how
far away current HEAD is from the last 1.12.13 release.  Doing an import
to git could be one first step.

/Simon

Harry Sintonen <[email protected]> writes:

> On Wed, 10 Sep 2025, Collin Funk wrote:
>
>> Harry Sintonen <[email protected]> writes:
>>
>>> Building CVS with USE_MMAP undefined (and thus using the
>>> posix_memalign code) results in full checkout taking minutes vs hours.
>>
>> I'll need some time to look at the rest of this, but just wanted to
>> mention that building CVS from the upstream repository will produce a
>> binary with some nasty vulnerabilities. Distributions have lots of
>> patches they apply for their repositories, see Fedora for example [1].
>
> Good point there. The debian stable CVS (version 2:1.12.13+real-30) is
> affected by this issue (and fixed by forcing no USE_MMAP), at least. I
> have not checked other distros myself.
>
>
>   Regards,

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=H3V8
-----END PGP SIGNATURE-----
--=-=-=--