- our kerberos support
- nolock
- setuid support / setxid in child
- avoid dangerous commands and only allow admin group to execute them
- selectable CVS directory name
- symlinked repository fixes
- log admin commands in history
- default to ssh instead of rsh
- localid keyword
- null revision on re-added files
- umask fixes
- t flag in log
- don't recursively re-enter signal error handler
- xasprintf in selected places
- ipv6 support