Today FreeBSD has upgraded CVS in their source tree, from 1.11.5 to 1.11.15, which addresses numerous security issues.

I am very pleased to see this happen. I have requested a CVS update last year, however, because some reason (might be the inmature of CVS code and the POLA violent), it was not imported until now.