X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:content-type:mime-version:subject:from
	:in-reply-to:date:content-transfer-encoding:message-id
	:references:to; q=dns; s=default; b=FAh6nmPK0FvErXSWnEAdMk/CsB3x
	O6d5T0njq11UJnNkxkU/PoEGpdbEslB1zoEs4V80y0P6UTf0MW5fQ1kp+RB3HZOX
	syf+teoobDczow+gq1NOSiM9P30ODa876meozXpykpp7QVIZgutYvXBG9Za/d/nE
	xImFfkO3vEW0X14=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:content-type:mime-version:subject:from
	:in-reply-to:date:content-transfer-encoding:message-id
	:references:to; s=default; bh=2nYdWi5zzj8Bn9/U30tBDjHOiTo=; b=fO
	O0moKqc1z/HGyf0zDxtBjqfDKzjvClWsulnvXArHPaGogD5R+psXfS7OUID8ESob
	39EYRx06238MkWSVpzYxcRF2yAfcEur2bsIHj1wE4rtA+i87hz0ZVlap0ishkVPN
	t12W81wMMqFiQkXT4BgW7llyhDgA+kJiaHNuuYKns=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=1.5 required=5.0 tests=AWL,BAYES_50,KAM_LAZY_DOMAIN_SECURITY,RP_MATCHES_RCVD autolearn=ham version=3.3.2 spammy=jariaaltocantenet, sk:jari.aa, D*cante.net, jari DOT aalto AT cante DOT net
X-HELO:	etr-usa.com
Mime-Version:	1.0 (Mac OS X Mail 9.3 \(3124\))
Subject:	Re: Security update needed for mercurial (upload error: doesn't follow naming convention)
From:	Warren Young <wyml AT etr-usa DOT com>
In-Reply-To:	<20160420165640.GB9640@piccolo>
Date:	Wed, 20 Apr 2016 12:07:42 -0600
Message-Id:	<4A2427F3-55E4-46B3-8111-EF085741290A@etr-usa.com>
References:	<86h9fjdhkf DOT fsf AT gmail DOT com> <vz137qhlfxy DOT fsf AT gmail DOT com> <20160420085938 DOT GA16548 AT calimero DOT vinschen DOT de> <20160420165640 DOT GB9640 AT piccolo>
To:	The Cygwin Mailing List <cygwin AT cygwin DOT com>
X-IsSubscribed:	yes
X-MIME-Autoconverted:	from quoted-printable to 8bit by delorie.com id u3KI84GD010927

On Apr 20, 2016, at 10:56 AM, Jari Aalto <jari DOT aalto AT cante DOT net> wrote:
> 
>> 3.7.3 as a security release, with fixes for:
>> 
>> CVE-2016-3630 Mercurial: remote code execution in binary delta decoding
>> CVE-2016-3068 Mercurial: arbitrary code execution with Git subrepos
>> CVE-2016-3069 Mercurial: arbitrary code execution when converting Git repos
> 
> New release uploaded, but I got this message (x64)?
> 
> ERROR: tar file 'mercurial-3.7.3.tar.gz' in package 'mercurial' doesn't follow naming convention
> ERROR: error while reading uploaded packages for Jari Aalto

I take from that that you are not using cygport for that package?  This sort of detail is one of the things that cygport takes care of for you.
--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -