From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 80560 invoked by alias); 25 Sep 2017 17:31:47 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 80286 invoked by uid 89); 25 Sep 2017 17:31:47 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=1.0 required=5.0 tests=BAYES_20,FREEMAIL_FROM,KAM_LAZY_DOMAIN_SECURITY autolearn=no version=3.3.2 spammy=moreton, Moreton, AndyM, andym X-HELO: blaine.gmane.org Received: from Unknown (HELO blaine.gmane.org) (195.159.176.226) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Mon, 25 Sep 2017 17:31:46 +0000 Received: from list by blaine.gmane.org with local (Exim 4.84_2) (envelope-from ) id 1dwXEC-0002cK-Vk for cygwin@cygwin.com; Mon, 25 Sep 2017 19:31:32 +0200 To: cygwin@cygwin.com From: Andy Moreton Subject: Re: Mercurial update needed for security fixes Date: Mon, 25 Sep 2017 17:31:00 -0000 Message-ID: References: <6af6ce98-5a26-675b-3ac7-e7fb7540274e@cornell.edu> Mime-Version: 1.0 Content-Type: text/plain User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.60 (windows-nt) X-IsSubscribed: yes X-SW-Source: 2017-09/txt/msg00245.txt.bz2 On Mon 18 Sep 2017, Ken Brown wrote: > On 9/18/2017 11:27 AM, Andy Moreton wrote: >> On Thu 17 Aug 2017, Andy Moreton wrote: >> >> Ping? >> >>> Hi, >>> >>> Can the mercurial maintainer please update to upstream Hg 4.3.1, to get >>> the fixes for CVE-2017-1000115 and CVE-2017-1000116. > > I don't know if he reads the list. I'm adding him to the Cc. > > Ken Still no response. If the maintiner does not read the project list or respond to email, then all of his packages are effectively abandoned. Can we please have a *security update* for mercurial ? AndyM -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple