From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 49480 invoked by alias); 18 Sep 2017 16:58:28 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 49472 invoked by uid 89); 18 Sep 2017 16:58:27 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-3.0 required=5.0 tests=AWL,BAYES_00,RP_MATCHES_RCVD,SPF_HELO_PASS,SPF_PASS autolearn=ham version=3.3.2 spammy=Hx-languages-length:353, sk:CVE201, moreton, Moreton X-HELO: limerock02.mail.cornell.edu Received: from limerock02.mail.cornell.edu (HELO limerock02.mail.cornell.edu) (128.84.13.242) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Mon, 18 Sep 2017 16:58:26 +0000 X-CornellRouted: This message has been Routed already. Received: from authusersmtp.mail.cornell.edu (granite3.serverfarm.cornell.edu [10.16.197.8]) by limerock02.mail.cornell.edu (8.14.4/8.14.4_cu) with ESMTP id v8IGwM17029432; Mon, 18 Sep 2017 12:58:23 -0400 Received: from [192.168.0.4] (mta-68-175-129-7.twcny.rr.com [68.175.129.7] (may be forged)) (authenticated bits=0) by authusersmtp.mail.cornell.edu (8.14.4/8.12.10) with ESMTP id v8IGwLpA026875 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Mon, 18 Sep 2017 12:58:22 -0400 Subject: Re: Mercurial update needed for security fixes To: cygwin@cygwin.com References: Cc: Jari Aalto From: Ken Brown Message-ID: <6af6ce98-5a26-675b-3ac7-e7fb7540274e@cornell.edu> Date: Mon, 18 Sep 2017 16:58:00 -0000 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.3.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-PMX-Cornell-Gauge: Gauge=XXXXX X-PMX-CORNELL-AUTH-RESULTS: dkim-out=none; X-IsSubscribed: yes X-SW-Source: 2017-09/txt/msg00181.txt.bz2 On 9/18/2017 11:27 AM, Andy Moreton wrote: > On Thu 17 Aug 2017, Andy Moreton wrote: > > Ping? > >> Hi, >> >> Can the mercurial maintainer please update to upstream Hg 4.3.1, to get >> the fixes for CVE-2017-1000115 and CVE-2017-1000116. I don't know if he reads the list. I'm adding him to the Cc. Ken -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple