including software and hardware (cards, serial numbers, etc) and uses CVS
(Concurrent Version System) or Subversion to maintain history of changes.
CVE-2008-4979 (getipacctg) is still not fixed by upstream, however,
that script is not part of the core fuction (rather a contrib)
and probably not going to be used by the normal users of this package.