multiple vulnerabilities in the cvs server code

[Dmitry Pryanishnikov]

Hello!

  Port security/portaudit reports the following problem:

Affected package: FreeBSD-491000
Type of problem: multiple vulnerabilities in the cvs server code.
Reference:
<http://www.FreeBSD.org/ports/portaudit/d2102505-f03d-11d8-81b0-000347a4fa7d.htm
l>
Note: To disable this check add the uuid to `portaudit_fixed' in
/usr/local/etc/portaudit.conf

I have 2 related questions:

1) What are current plans to fix these vulnerabilities?

2) Are the FreeBSD public CVS servers trustworthy now?

Sincerely, Dmitry
-- 
Atlantis ISP, System Administrator
e-mail:  dmitry at atlantis.dp.ua
nic-hdl: LYNX-RIPE