Update to knu-cvsweb 1.106.1.71. 2001-05-08 Akinori MUSHA <knu@iDaemons.org> * cvsweb.cgi: Fix a typo and get diff -F RE to really work.72bd7e8e3e
Port details
devel/cvsweb 2.0.6_2
WWW CGI script to browse CVS repository trees
Port info
- Maintainer
- noackjr@alumni.rice.edu
- Packages
- latest: 2.0.6_2
- Upstream
- up to date
- Last update
- to 2.0.6_2 · fb16dfecae
- Quarterly
- 2026Q4: 2.0.6_2
- WWW
- https://www.FreeBSD.org/projects/cvsweb.html
- Links
- cgit · VuXML · Report wrong data
Install
- Package
# pkg install cvswebinstalls 2.0.6_2 fromlatest; fromquarterly(2026Q4) 2.0.6_2- Port
# cd /usr/ports/devel/cvsweb && make install clean# make -C /usr/ports/devel/cvsweb config # change options first
- Size
- 49 KiB download · 151 KiB installed
- Depends on
- lang/perl5.42 5.42.3
- Options
- 1 of 1 on in the package: DOCS
- pkg-message
Shown after installing
Quickstart: cd /usr/local/etc/cvsweb cp cvsweb.conf.dist cvsweb.conf and you can browse your CVS repository via web if you set up your web server correctly. The URL to get to the cvsweb will be like `http://localhost/cgi-bin/cvsweb.cgi/'. To configure its appearance and repository entries to browse, edit cvsweb.conf* as you like. For further information, please look into the directory `/usr/local/share/doc/cvsweb'.
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 2.0.6_2 | 2.0.6_2 | – |
| FreeBSD 15 | 2.0.6_2 | 2.0.6_2 | – |
| FreeBSD 14 | 2.0.6_2 | 2.0.6_2 | 2.0.6_2 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 2.0.6_2 | 2.0.6_2 | – |
| FreeBSD 14 | 2.0.6_2 | 2.0.6_2 | 2.0.6_2 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed (1)
The CVE record lists the packaged version 2.0.6_2 as affected, and no VuXML entry names the CVE. What does this mean?
| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2018-1000998 | 6.1 | 2019-02-04 | FreeBSD CVSweb version 2.x contains a Cross Site Scripting (XSS) vulnerability in all pages that can result in limited impact--CVSweb is anonymous & read-only. It might … |
VuXML only (0)
Listed in VuXML, the packaged version 2.0.6_2 is still in the affected range; pkg audit reports it. What does this mean?
None.
Fixed (0)
No VuXML entries for this package.
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (107)
Update to knu-cvsweb 1.106.1.70b. No functional changes but only documentational changes. 2001-04-25 Akinori MUSHA <knu@iDaemons.org> * cvsweb.conf: Introduce the new knu-cvsweb site: http://www.idaemons.org/~knu/cvsweb/ * ChangeLog: Update and reformat.cd4250fe80
Update to knu-cvsweb 1.106.1.70. 2001-03-28 02:20 knu * cvsweb.cgi: Re-fix the bogus fix for the previous colons-in-a-filename problem. Noted by: Yar Tikhiy <yar@freebsd.org> 2001-03-28 01:39 knu * cvsweb.cgi: Conform cvsweb-markup pages to HTML 4.0 Transitional. Submitted by: Will Andrews <will@physics.purdue.edu> Validated by: http://validator.w3.org/0a51fda249
Update to knu-cvsweb 1.106.1.68. 2001-03-23 Akinori MUSHA <knu@iDaemons.org> * cvsweb.cgi: Encode colons in file names properly. FreeBSD PR: 25963 Submitted by: Marc van Woerkom <3d@FreeBSD.org> * cvsweb.cgi: MFZ: 1.106. Do closedir() properly. 2001-02-01 Akinori MUSHA <knu@iDaemons.org> * cvsweb.cgi: Use a fixed-width font in the colored diff view. Requested by: Julian Elischer <julian@elischer.org>8497c48241
Add %%PORTDOCS%%.808a2eada9
Update to knu-cvsweb 1.105.1.65.
2001-01-29 Akinori MUSHA <knu@iDaemons.org>
* cvsweb.cgi: Remove an obsolete notice: CVSWEB_CONFIG is disused.
One leftover substitution: "cvs" -> $CMD{cvs}e80b23e9c7Update a patch to fix a typo rather than a repack/update.a417793506
Update to knu-cvsweb 1.105.1.64. 2001-01-13 Akinori MUSHA <knu@iDaemons.org> * cvsweb.conf: Add some knu-cvsweb info. * cvsweb.cgi: MFZ: 1.105. * README.knu, TODO.knu, cvsweb.cgi, cvsweb.conf, cvsweb.conf-freebsd, cvsweb.conf-netbsd, cvsweb.conf-openbsd, cvsweb.conf-ruby: Change CVS tags: "Id" -> "Idaemons".db80aaacb9
Update to knu-cvsweb 1.104.1.63. 2001-01-12 08:42 knu * cvsweb.cgi, cvsweb.conf-freebsd, cvsweb.conf-netbsd, cvsweb.conf-openbsd: Clean up URI parser. Workaround thttpd's buggy SCRIPT_NAME / PATH_INFO parser. Requested by: Makoto MATSUSHITA <matusita@jp.FreeBSD.org> Allow downloading a single port/pkgsrc in tarball by default.7a981c1892
Update to knu-cvsweb 1.104.1.62. 2001-01-12 03:17 knu * cvsweb.cgi, cvsweb.conf: D'oh, forgot to chomp the result of `uname`. Submitted by: Christian Weisgerber <naddy@mips.inka.de>a047053c55
Update to knu-cvsweb 1.104.1.61. 2001-01-11 11:00 knu * cvsweb.cgi, cvsweb.conf: Oops. 2001-01-11 10:52 knu * cvsweb.cgi, cvsweb.conf, cvsweb.conf-freebsd, cvsweb.conf-netbsd, cvsweb.conf-openbsd: Run "tar cf - ... | gzip -c" rather than "tar zcf - ..." to avoid tar(1)'s automatic padding of nulls to align with the block size, which is just garbage for a receiver. Noted by: Katsuyuki Komatsu <komatsu@sarion.co.jp> Have $uname variable to hold the OS implementation name. Move %CMD's initialization part to the beginning of cvsweb.conf so it can use $uname and configure properly for the OS. Wrap FreeBSD or OpenBSD specific features in conditional blocks using $uname. Fix some open() calls in good manners.d7d50312b5
Update to knu-cvsweb 1.104.1.59.
2001-01-05 09:00 knu
* cvsweb.cgi: Delete $ENV{PATH} before everything. (against -T
paranoia) It's nothing to worry since cvsweb.cgi always invokes
executables by full paths, though.
Correct the error messages regarding $command_path.
2001-01-03 17:57 knu
* cvsweb.cgi, cvsweb.conf: Don't rely on perl's $ENV{PATH} search.
Search commands for itself and specify them by full paths.5c89a45427Update to knu-cvsweb 1.104.1.57. 2001-01-03 11:55 knu * README.knu, cvsweb.cgi: Don't forget to add $query to the URL when redirecting. Now module alias redirection and Attic redirection work with all sticky variables preserved. (Previously they didn't work against a non-default cvsroot) Put a text field on each directory view that allows user to jump directly to an arbitrary module, which can be specified either by a full module/file path or by a module alias.54cfbac643
Update to knu-cvsweb 1.104.1.56. 2001-01-03 08:34 knu * README.knu, cvsweb.cgi, cvsweb.conf: List CVS repository entries in the specified order, not alphabetical. Now /usr/local/etc/cvsweb/ is the default directory for configuration files.a9c83761b1
Update to knu-cvsweb 1.104.1.55.
2001-01-02 21:23 knu
* cvsweb.cgi, cvsweb.conf: Get cvsweb.cgi to run under perl -T.
Change perl command line:
Change perl5 to perl and just declare `require 5.000'.
Remove -s option that was intended for debug use.
Add -T option to perform security checks.
Change search paths for cvsweb.conf:
Don't adopt the value of $ENV{CVSWEB_CONFIG} that was intended
for
debug use.
Search the same directory that cvsweb.cgi is in instead of the
current directory.
Invoking `last' in `do { ... } while (0);' is wrong. Change the
loop to `while (1) { ... last; }'.
Don't do chdir. Instead, use tar(1)'s -C option and cvs(1)
export's -d option.
Explicitly define $ENV{PATH}.
Turn $allow_compress off by default so user can debug cvsweb.cgi
easily.f46dcf77e6Update to knu-cvsweb 1.104.1.54.
- Install cvsweb.conf* files under ${PREFIX}/etc/cvsweb/.
2001-01-02 08:15 knu
* cvsweb.cgi, cvsweb.conf, cvsweb.conf-freebsd, cvsweb.conf-netbsd,
cvsweb.conf-openbsd, cvsweb.conf-ruby: Add $prkeyword variable to
allow user to use (e.g.) `Bug' instead of `PR' as the bug report
identifier.
Add cvsweb.conf-{freebsd,openbsd,netbsd,ruby} files, and move
rather FreeBSD specific configuration values to
cvsweb.conf-freebsd.
Add a %funcline_regexp entry for Ruby. (*.rb)
2001-01-02 06:24 knu
* cvsweb.conf: Add `pending' to the list of PR categories.
2001-01-02 05:57 knu
* cvsweb.cgi: Reduce 'Use of uninitialized value' warnings.
Noticed by: Wolfram Schneider <wosch@schneider.org>4701f83604Update to knu-cvsweb 1.104.1.52. 2000-12-30 08:56 knu * cvsweb.cgi: Oops, I forgot "cvs export" always need a -r/-D. Specify -rHEAD when no tag/branch is defaulted. 2000-12-30 08:35 knu * cvsweb.cgi, cvsweb.conf: Add $preformat_in_markup variable and turn it off by default. This option should be turned off when you have files in the repository that are in a multibyte encoding which uses HTML special characters ([<>&"]) as part of a multi-byte character. (such as iso-2022-jp, ShiftJIS, etc.) Otherwise those files will get screwed up in markup. Fix for those systems which tar(1)'s are not GNU tar(1). - Add @@tar_options variable and make the --ignore-failed-read flag optional. - Use cvs export instead of cvs checkout, so the --exclude 'CVS' flag isn't needed. Noticed by: Christian Weisgerber <naddy@mips.inka.de> Fix for those systems which cvs(1)'s don't support -R option. (Actually, only FreeBSD's and OpenBSD's cvs(1) support it) - Add @@cvs_options and make the -R flag optional. 2000-12-29 22:29 knu * cvsweb.cgi: Add charset to all text/* output, including diffs. Submitted by: Alexey Zelkin <phantom@cris.net>173508aba5
Update to knu-cvsweb 1.104.1.49. Tiny fixes. 2000-12-29 18:12 knu * cvsweb.cgi: The use of `do "file"' is obsolete. Use require instead. 2000-12-29 17:47 knu * cvsweb.cgi: Add the prototype declaration for hrefquote().8360729a69
Update to knu-cvsweb 1.104.1.47. 2000-12-29 03:17 knu * README.knu: Mention automatic tarball generation feature. 2000-12-29 03:16 knu * TODO.knu: Directory sorting was fixed at the same time that "show only tags" feature was fixed. 2000-12-29 03:07 knu * cvsweb.cgi: Specify --ignore-failed-read on invoking tar(1). 2000-12-29 02:49 knu * cvsweb.cgi, cvsweb.conf: Add "automatic tarball generation" feature. You can check out a whole directory in gzipped tarball. Obtained from: Debian package: cvsweb_1.93-1 Allow space characters in file names. (not tested yet)29196ffb00
Update to knu-cvsweb 1.104.1.45. 2000-12-18 13:25 knu * TODO.knu, cvsweb.cgi: Revert MFZ: 1.103 -> 1.104 which introduced a bogus bug. As noone seems to need to use 0.X revisions, I'd just drop it. This should fix the "show only tags" feature. 2000-12-18 12:47 knu * cvsweb.cgi: Silence the warnings. 2000-12-18 11:48 knu * cvsweb.cgi: Add meta tags to prevent WWW robots from crawling over the cvsweb. Submitted by: Wolfram Schneider <wolfram@schneider.org>85a7d5d4e0
Update to knu-cvsweb 1.104.1.42. 2000-12-08 00:11 knu * cvsweb.cgi: Silence `Use of uninitialized value' warnings. (again) 2000-12-07 03:20 knu * TODO.knu: Mention "show only tags" feature breakage. 2000-12-07 03:19 knu * cvsweb.cgi: Emit a rather better error message when a user requests to check out a deleted file. Pointed out by: Chris Faulhaber <jedgar@fxp.org> Cut an out-of-date error message. (adding -R and -l options to the cvs command line should have obsoleted it) Optimize, clean up. 2000-11-23 04:26 knu * cvsweb.cgi, cvsweb.conf: Add a new variable $charset to specify the charset for HTML output. Submitted by: SADA Kenji <sada@bsdclub.org>b0694892f3
Update to knu-cvsweb 1.104.1.39. 2000-11-05 00:32 knu * cvsweb.cgi: Silence `Use of uninitialized value' warnings. 2000-11-03 02:36 knu * README.knu: Mention cat.1 is hyperlinked as well as cat(1). 2000-11-03 02:34 knu * cvsweb.cgi: MFZ: 1.104: 2000-11-02 07:05 hnordstrom * cvsweb.cgi: Allow for 0.X versions. CVS accepts such version numbers in import -b even if not strictly legal... 2000-11-03 02:33 knu * cvsweb.conf: Set the default diff type to unidiff for all browsers, not only text-based ones.0ec15f352f
Install TODO.knu too.
Install under ${PREFIX}/www when it exists or ${PREFIX}/share/apache
does not exist.
Submitted by: jeh3f9eb8e356Update to knu-cvsweb 1.103.1.37. 2000-10-21 00:46 knu * cvsweb.cgi: Always give options to click on a non-colored diff _and_ a colored diff. Requested by: SO many people :> 2000-10-20 22:59 knu * TODO.knu: Hyperlinking was properly fixed. 2000-10-20 21:28 knu * TODO.knu, cvsweb.cgi: Fix htmllify so that <A href="...">...</A> won't nest. :) Do not show additional "(colored)" diff links when long colored diff is the default. Reduce the use of `.' operator that is known to be expensive. Fix indent, clean up. 2000-10-11 06:14 knu * cvsweb.cgi: Introduce a new function: htmlquote(). Clean up hyperlink tags. - Use &link() instead of <a href="...">...</a>. - Do urlencode() or htmlquote() as appropriate. 2000-10-11 03:48 knu * cvsweb.cgi: - Recognize "links" as another text mode browser. - Fix the revision links in the annotation view of a file. Submitted by: Christian Weisgerber <naddy@mips.inka.de>3fd0fe8fb7
Update to knu-cvsweb 1.103.1.33. 2000-10-07 16:44 knu * cvsweb.cgi: Fix &link() not to put a redundant trailing LF. Improve manpage linking to support "foo.1" as well as "foo(1)". 2000-10-07 16:35 knu * cvsweb.cgi: Fix screwups in the last commit. Parse rlog's output explicitly. Recognize 77 ='s as a file separator, and 28 -'s as revision separator. Submitted by: Makoto MATSUSHITA <matusita@jp.FreeBSD.org> 2000-10-03 04:07 knu * cvsweb.cgi: Cleanup $barequery generation. Undefine "my" variables when they are done.6cddb65e13
Update to knu-cvsweb 1.103.1.30. 2000-10-01 05:10 knu * cvsweb.cgi: Fix annotation bugs. - Do not pass gzip'ed directives to cvs. (it never worked, sigh) - Fix mis-spacing. Now it should look pretty well.7915997aa9
Update to knu-cvsweb 1.103.1.29. 2000-10-01 03:48 knu * INSTALL, cvsweb.cgi: Specify -R (Read-only mode) and -l (Do not log in history) flags when doing a cvs annotation so that one does not need to turn on the write permission on CVSROOT/history for the user which httpd runs cvsweb.cgi as. (typically "nobody") 2000-10-01 03:27 knu * cvsweb.cgi: Fix the comment to make how to set $config clear. Inspired by: "Dan Langille" <dan@langille.org> 2000-09-29 03:06 knu * cvsweb.cgi: Trap errors in the configuration files on loading and show error messages. (Previously it failed silently) Submitted by: Sean Scarff <sean@pavilion.net>d2361b029e
Update to knu-cvsweb 1.103.1.26. 2000-09-22 20:13 knu * cvsweb.cgi, cvsweb.conf: Remove $backcolor and introduce $body_tag_for_src to allow to set the foreground color. Noticed by: dcs@FreeBSD.org 2000-09-22 00:30 knu * cvsweb.cgi: MFZ: 1.103.4e169e9bbe
Update to knu-cvsweb 1.101.1.24. 2000-09-20 05:07 knu * cvsweb.cgi: Follow tab-width/tabstop/ts directives when expanding tabs into spaces. Currently, only first 10 lines are scanned for the directives. 2000-09-20 04:57 knu * cvsweb.cgi: MFZ: 1.101. - Fix a few bugs under mod_perl. - Use the Compress::Zlib module if available. - Embed PDF files inside the cvs markup view. 2000-09-20 03:35 knu * cvsweb.cgi: s/ts/tabstop/ that I forgot to substitute in the last update. 2000-09-12 02:11 knu * cvsweb.cgi: Allow one to set the default diff type. Inspired by: Makoto MATSUSHITA <matusita@jp.FreeBSD.org> 2000-09-10 20:54 knu * cvsweb.cgi: Clean up spacedHtmlText().4b7ac42f7b
Update to 1.94.1.19. 2000-09-05 00:55 knu * README.knu: Mention revision numbers hyperlinking in annotation. 2000-09-05 00:53 knu * cvsweb.cgi: Get the revision numbers in annotation available as hyperlinks. Requested by: Josef Karthauser <joe@pavilion.net> 2000-09-04 23:50 knu * cvsweb.cgi: Fix previously introduced incorrect fix. s/\s+\n$//; --> s/\s+$/\n/; FreeBSD PR: misc/20989 Submitted by: Tony Finch <dot@dotat.at>99fc22ec60
Update to knu-cvsweb 1.94.1.17. 2000-09-04 03:25 knu * README.knu, cvsweb.cgi, cvsweb.conf: Introduce manpage hyperlinking. 2000-09-04 02:33 knu * cvsweb.cgi: Get all mail URLs and addresses as hyperlinks, not just the first one. (s/// --> s///g) Install ChangeLog file.88ba408405
Update to knu-cvsweb 1.94.1.15. 2000-08-25 18:01 knu * cvsweb.cgi: Get side-by-side diff working when $showfunc is true, noting that `-p' option of diff(1) can only be used with context and unified diffs. Submitted by: Roger Hardiman <roger@cs.strath.ac.uk> Allow to specify CVS tags or branch names (including `.' and `HEAD') on cvs checkout. e.g. http://foo/cvsweb.cgi/bar/dood.c?rev=. http://foo/cvsweb.cgi/bar/dood.c?rev=RELENG_4 http://foo/cvsweb.cgi/bar/dood.c?rev=RELENG_4_1_0_RELEASE Not for diff currently, as rcsdiff does not grok CVS tags. Inspired by: Folks at the FreeBSD cvs-all list. Specify `-R' (turn on read-only repository mode) and `-l' (do not log in the command history) on cvs checkout, so that one does not need a write permission with the repository. 2000-08-25 00:53 knu * cvsweb.cgi: MFZ 1.94. (Fix a typo in JavaScript code)4c77fa91d8
Update to knu-cvsweb 1.93.1.13. - Use cvsweb.conf* in the current directory when they don't exist in /usr/local/etc/. - Declare function prototypes to shut up runtime warnings. - Remove redundant white space at the end of lines.2a69ccf509
Update to 1.93.1.10. - Nothing but #!/usr/bin/perl -> #!/usr/bin/perl5
Define USE_PERL5 and substitute ${PERL} for /usr/bin/perl5.1dceeeac11Update with my development branch of cvsweb.
PORTVERSION 1.93.1.9 indicates that it's knu's cvsweb rev. 1.9, based
on Zeller's cvsweb rev. 1.93. I'll keep merging all the changes that
will be made on Zeller's version as well as enhancing it to meet our
needs. :)
Below is an excerpt from README.knu.
----
Added features over Zeller's version:
o Customizable "show functions" option
You can specify a regexp for each file type to teach rcsdiff(1) to
recognize function lines.
o Customizable PR categories
o Move $prcgi to cvsweb.conf
Now each repository can have its own PR categories and
query-pr.cgi URL, which can be defined in cvsweb.conf-${cvstree}.
It is useful when you have such as NetBSD and/or OpenBSD
repositories.
o Improved support for text-based browsers
Unidiff is the default format for diffs, for text-based browsers.
o Enhance hyperlinking PR # feature.
The following PR numbers will all be hyperlinked. :)
PR: 12345, 67890, ..
PR: #12345, #67890, ..
PR# sparc/12345, i386/67890
PR: ports/43210
kern/98765
.. is related to bin/4567, which is ...3c1c50d57eBrowse two repositories by default. local => /home/cvs FreeBSD => /home/ncvsaae697a4f6
Update to rev. 1.90. o checkout without revision should default to HEAD07b3667216
Correct md5 that is calculated from the original distfile. The previous value was of my locally packed tarball somehow..6c7b47848d
Update to rev. 1.89. Reduce warnings. Make https URLs clickable as well as ftp and http URLs.a8636d5572
Update to rev.1.86. This update fixes several SECURITY problems, so PLEASE UPDATE to this version ASAP.b51fb0f32b
Use ${MASTER_SITE_LOCAL}.be6c01ee85Local distfiles have been moved to: ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/local-distfiles/knu/60f2ecb476
Update to the latest CVS snapshot. - Minor fixes - Timezone support9eb728a459
Remove subdirectories too.f386d54c2c
Satisfy bento by removing the apache directory on package building. This port does not explicitly depend on a specific version of Apache nor other www servers but leaves the option for users, since cvsweb should work on most cgi capable www servers.86385a8dd1
Change MAINTAINER addresses from knu@idaemons.org to knu@FreeBSD.org so as to make it clear that a FreeBSD committer maintains them.5265cd36e2
PORTNAME/PORTVERSION updateed33fb7de0
Style fix: - Remove post-install information from DESCR's. - Replace /usr/local with ${PREFIX} in DESCR's and MESSAGE's. - Remove unnecessary whitespace.
Pointed out by: portlinta42adeafddUpdate to Henner Zeller's cvsweb. (Rev. 1.80) If you prefer as simple view as before, you can easily customize so. Enjoy it. PR: ports/17388 Submitted by: myself Approved by: Bill Fenner <fenner@freebsd.org> (The original author of cvsweb)cf6e506a12
Mostly minor changes. Changes: - get to install README - change the maintainter And because Apache isn't the only web server and the configurations may vary; - stop trying to check if any web server is installed - allow a user to specify a cgi-bin directory to install - stop using icons that Apache installs by default - rename the script from cvsweb to cvsweb.cgi Approved by: sada540b845132