i will import cvs 1.11.10, as it includes security fix.

itojun


SERVER SECURITY ISSUES

Malformed module requests could cause the CVS server to attempt to
create directories and possibly files at the root of the filesystem
holding the CVS repository. Filesystem permissions usually prevent the
creation of these misplaced directories, but nevertheless, the CVS
server now rejects the malformed requests.