From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 2421 invoked by alias); 6 Nov 2014 12:37:53 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 2408 invoked by uid 89); 6 Nov 2014 12:37:52 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=0.2 required=5.0 tests=BAYES_50,RP_MATCHES_RCVD,SPF_HELO_PASS,SPF_PASS autolearn=ham version=3.3.2 X-HELO: jay.w3.org Received: from ssh.w3.org (HELO jay.w3.org) (128.30.52.60) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with (AES256-SHA encrypted) ESMTPS; Thu, 06 Nov 2014 12:37:50 +0000 Received: from localhost ([127.0.0.1] helo=M6700) by jay.w3.org with esmtpa (Exim 4.72) (envelope-from ) id 1XmMJv-0003Eu-B5 for cygwin@cygwin.com; Thu, 06 Nov 2014 07:37:47 -0500 Date: Thu, 06 Nov 2014 12:37:00 -0000 From: Chris Lilley Message-ID: <100143433.20141106133746@w3.org> To: cygwin@cygwin.com Subject: Latest Cygwin Mercurial verson still uses SSL3 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-SW-Source: 2014-11/txt/msg00099.txt.bz2 Hello Cygwin, Mercurial is a version control system. Mercurial version 3.2 removes the SSL3 POODLE vulnerability [1]. However, the latest cygwin installer (downloaded today, 6 Nov 2014) says the current version number of Mercurial is 3.0.1-1. Mercurial repositories that have disabled SSL3 can no longer be accessed using Cygwin. Therefore, this is a Cygwin-specific issue. Are there plans to port Mercurial 3.2 to Cygwin? [1] http://mercurial.selenic.com/wiki/UpgradeNotes -- Best regards, Chris Lilley, Technical Director, W3C Interaction Domain -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple