From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-qv1-xf29.google.com (mail-qv1-xf29.google.com [IPv6:2607:f8b0:4864:20::f29]) by sourceware.org (Postfix) with ESMTPS id 051263857020 for ; Wed, 10 Mar 2021 11:24:50 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org 051263857020 Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=dinwoodie.org Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=adam@dinwoodie.org Received: by mail-qv1-xf29.google.com with SMTP id t5so544897qvs.5 for ; Wed, 10 Mar 2021 03:24:50 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=dinwoodie.org; s=google; h=mime-version:from:date:message-id:subject:to; bh=XAr594F7dpd24efckX8NomWqWZEHLCJ8QHpfndjDi7E=; b=dHxFJcS0kcWx6IesDc7+gBYy2NU/7d1x9g8cnzRfieQd8sc1X+RJg+EIm1GdV6ePOF bV2hTqivRG8qTZvIn+MDOjRfYu1rUMUC+ocZSUwxTrEGnoYoieUXfRjb5pJ0VBc46gfw wOzZJUoew+mKQSFb2CNmqZWRi2z76DqXqf1dU= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=XAr594F7dpd24efckX8NomWqWZEHLCJ8QHpfndjDi7E=; b=qF8mbmavsjNVZiTsxzco91BXf5iU/4PbdztHoN07PJVmqDKlTV0n3cbga4bW+zpdPV HjkAHu4KxlIrHviOtfv68JcsGaQOh7G8DQe817y7pNcvW9sBfPR+j4NHS9ZNFWnG2si7 r95HsMIMi7tceegyXftTSOZoLRoQJTBQ1/EmLE9Z+0CjPztuBIq43KuBlPgcHnSSOqLy gaGimZUJXY0rAdCZ7izfWqE0yMSHxpOU72hKY5FFjgABgCzl3SrGsUDcSrFW/C0hwnI8 js16ZcE9QWli0GjnPwDCb3pVrvWVqutlEwbjHR34XBS+kQuWWSsa3Awocm+Izm2tQ0xv 4FmA== X-Gm-Message-State: AOAM530vb0qDmsSWYTSaddYkltr7hTK9MvfTh+IoOPpt4KT131PMnRg/ T8qg9Xnnw8msoiBodLeOGg2pZxJnALjJURzDlCTUhpDiQvpFnA== X-Google-Smtp-Source: ABdhPJyjnrdmCYLZlO4az1qzrJYVnQ6Z2+8CEIY85xZkqj8G+Lya80NZTjzQCsLP/HPtczoMDSLSjCDblaLl0QzsWqU= X-Received: by 2002:a0c:f9cc:: with SMTP id j12mr2214533qvo.15.1615375489383; Wed, 10 Mar 2021 03:24:49 -0800 (PST) MIME-Version: 1.0 From: Adam Dinwoodie Date: Wed, 10 Mar 2021 11:24:13 +0000 Message-ID: Subject: Security update: Git v2.30.2-1 To: cygwin-announce@cygwin.com Content-Type: text/plain; charset="UTF-8" X-Spam-Status: No, score=-1.8 required=5.0 tests=BAYES_00, DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, KAM_NUMSUBJECT, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS, TXREP autolearn=no autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on server2.sourceware.org X-BeenThere: cygwin-announce@cygwin.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Read-only mailing list announcing new and updated Cygwin packages List-Unsubscribe: , List-Archive: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Mar 2021 11:24:52 -0000 Version 2.30.2-1 of Git has been uploaded and should be coming soon to a mirror near you. This update fixes CVE-2021-21300: On case-insensitive file systems with support for symbolic links, if Git is configured globally to apply delay-capable clean/smudge filters (such as Git LFS), Git could be fooled into running remote code during a clone. This update includes the following packages: - git - git-cvs - git-debuginfo - git-email - git-gui - gitk - git-p4 - git-svn This is an update to the latest upstream release. For a full list of the upstream changes in this release, please refer to the upstream changelogs: https://git.kernel.org/cgit/git/git.git/tree/Documentation/RelNotes https://kernel.googlesource.com/pub/scm/git/git.git/+/master/Documentation/RelNotes/ https://github.com/git/git/tree/master/Documentation/RelNotes Enjoy!