X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:subject:to:references:reply-to:from:message-id
	:date:mime-version:in-reply-to:content-type
	:content-transfer-encoding; q=dns; s=default; b=HE3r2ND+kQml4Lm+
	Yz+GzjTc0SrXFt+iLgFtzMFA68pm2neMijpxW0o4JAcCC9mCBzme1y3plPf6emX+
	ZGAy46tJMmI9OMAzV2+xQk3ocWhVNGc9Xf7c8tzvqN4IHgXgRmVDwRSGLPlKGcnd
	b/TcJ9BEtgyUbvdnlyXQ0DUXPbA=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:subject:to:references:reply-to:from:message-id
	:date:mime-version:in-reply-to:content-type
	:content-transfer-encoding; s=default; bh=0nqNq5dhuwg89szaWoiIjE
	xOLdQ=; b=PT+rvmPy3QpqkCqoIsmZe7O/l7ufGpJwjb/CZMpf3aWbKBx9zDrvHG
	i1Vrxn7ngYKVe9kVNezY9nLP2hXgd0qmWVUnCMt4ynSK6UstjnCYqh4246WZ0sai
	IHv+y5gn0MsH99FAXJCVR8W7QAx/t2UXw35hfKxF5wNIGHBJWL4oU=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-1.4 required=5.0 tests=AWL,BAYES_00,FREEMAIL_FROM,KAM_NUMSUBJECT,RCVD_IN_DNSWL_NONE,SPF_PASS autolearn=no version=3.3.2 spammy=Cygwin, stating, company, organization
X-HELO:	mail-it0-f52.google.com
X-Google-DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:reply-to:from:openpgp :autocrypt:message-id:date:user-agent:mime-version:in-reply-to :content-language:content-transfer-encoding; bh=lox3r7u1BEcQwPC0ch8lI6XNoWngCVPSj6Se/2UTdj0=; b=NSI7w/LNpLpilTW2t2gHEf47TtfPfq/z2wLJ6ajooExvTK6A4TTem65H3dvfijckJ5 lTSOMHOzNp/YNcxGSO6yQHGRU5OtU5/TfEYNO45Vj2oIfLPZ2OTzFpgeNTINxr0KifT1 Wv63ajurXrRnWJVKDXDBinpOw5nl30ActNdVULoSvppLHk4rTk8BSeECY3CTtQnwWu+f N4P8oJIe43gKt+taaaNW0bh/Y7mdmia9tqvkoo+c3UPJ/aq4pdU/IQ+BjJ7h4E1W1yz5 PD8CJJzHoaFq4Hm2SyXBopsALOkJtm63bssw7b0+QI5WJxfUXo3Xpm5zwSk6BMlVvCdy 9PSg==
X-Gm-Message-State:	ALKqPweLweQ0QqxsGU7XRQPz96EG7ISstdNeFk5n6wlfp9RSbLqncPBf N/kgcKD8C9FFRXASz0aAoZoLmA==
X-Google-Smtp-Source:	AB8JxZp6LsFUceH0sD/nfnZLO3Zg7B237ryo8d9nVuCi1oRnhwN7plb/0AxgE1H3gayoBb8nDvitNA==
X-Received:	by 2002:a24:74d2:: with SMTP id o201-v6mr9864595itc.151.1526301604716; Mon, 14 May 2018 05:40:04 -0700 (PDT)
Subject:	Re: CYGWIN 2.8
To:	cygwin AT cygwin DOT com
References:	<BL0PR18MB23406D14CCAAD2600A1BD4F9DB9A0 AT BL0PR18MB2340 DOT namprd18 DOT prod DOT outlook DOT com> <18bf68cd-7681-2dcc-f360-252cbfeab7a7 AT t-online DOT de>
Reply-To:	cygwin AT cygwin DOT com
From:	cyg Simple <cygsimple AT gmail DOT com>
Openpgp:	preference=signencrypt
Autocrypt:	addr=cygsimple AT gmail DOT com; prefer-encrypt=mutual; keydata= xsFNBFW7cuMBEADJg9disJJSBGRlDxdAt2hR6I6Ruzm8vw+zpjEGLsYyWiBhoLV1EEmHLyhh bdPEJx0DU2sPVbTcESRiYaTOVK6wJQMFur+WZ5cUkIXfJBQPUPRUcxbjrY8MtWYguhACSP/T ZGjtxl9w92fGYLTBDqVmOb9rjEo9UbmZwDTCYhjkAvlXR/K+q6+jGgrXLIC1CpiWqE1l2yH9 RGclbNc3Yjq9RJgqiHI+VgRa2P16NteTLSrD428YJS5p8rFIYngZooNClCJsrSAZCJ2abQ40 0S+kP/lcoSph5JXIDAL6sB6hUZg9sVpL4iU2Qsm7EKDBgvw72+AGH+ApxEgijYCPe8O1aybd qq2KWOeIg40gAua3ZPq7XIGd4TGIA0kzAK0wnE1LjSWF4h/bkf8CmGn3s7upAkNa75XOKApa V2cVMmi6qdcgjCDkNQbbgvv0V4VmqQYlFXYLfzOZZB3LgydeoMERX+74aVEHKv5PxEbfwLnv 29nsKvB7yLhfYSbaHQPOIqkgMuw+bx8m1Zh9IKJv0/O8Ta/yvyW2sHWMcAAmd4t1gykbZCZa NbvKAhvIP9NWjREae+jjsJJj98mbvsI8pCFbc2coHWNAk4JyBjDcMFrhTNA+8+D5RveRERrc yFu2qU6Bl7Bz2U1VLsmo2HcmRQRO6L0CwwsIlgeZGSmyJxPzzwARAQABzStFYXJuZXN0IEJv eWQgPGVib3lkNTNlbnRlcnByaXNlc0BnbWFpbC5jb20+wsF/BBMBCAApBQJVu3LjAhsjBQkJ ZgGABwsJCAcDAgEGFQgCCQoLBBYCAwECHgECF4AACgkQcYOkK+VgItVscRAApR0Iad65JnDa 7RlhEducTNM836qBbqcsQSPoEGJ5sNhHP9VF2jB2Kd4JONyksLyVD/nU+hJwTB4SnUC5dwRo 0a4HQbYSaiLoXZNlRGGP++ACy7E0BT+pvV9gd9tmLtYDvuHzEbEY70nmt8FNrheEznv6CSss jY6uGDNfXV+7Hh+xZJ9z71Gb3mO6byz5EIDz+iFZU6VpIyYVUFnyR5fvkJwNqFoOVqc5TqkR mDWWtb5nEYLMNmDcSbh1lY7YEUfHFqhT++O/gXTv9hZ5jU7kuA9OYkc4HY1ctRI3xuu+YzBY NwzEeKmdC1JK2XXERHxQGvtru+G9mwAdFQ9TAiQinsMqAJfDW/WX5eaEaTrtkizWiTM93eJ+ zXpyBtxWjdQUNpYqEysWnNz0ZA0IB6P4Py1Gdts/T0i8tDE9C9UiqbZSj7VnkP4vwI311RmP ooXuzjpOc4RFTbYdBiobpy+RLyIZSMEqRd51fveXZPCGzs3BDdNX48c2biwLVQ3MNpCKU9D3 5I0Kd6vdST4UTQrQ9Gco0o60M9+0gi/YHHAol7/XTW64Me1lj5ELsUSWnRI4xEQbCbOKRa15 LRxRoVqsVOeZqUlKI9AvrVaSaJz+PkaORcHFWIWnS+jzRc+vpvO9vbg3AoZvKrr2Rkhq/558 RTxZJz8UlUHeC+PVN7ai8GzOwU0EVbty4wEQAOu9QeDKIYUr+dRp/tNWRIt+MdHB9vxAnRIm 8fEC7/LlYu5HhdfBk9ol1EVeuQRWobipWmkPvIBBVKNFAC4yjV09Bp4s+AEIAkHD6JyQkbwd j9urYHf14RGdfJMZaA8B6vQpgywoQ51qLn1DqzEfPzeUVYTBoqDiTrfNA4roSvq3MWWl51CM plVALm57UIDnK5+8Dlgw235iu2BuzY0iq5wCeGGcZzTruudSwQ656uvcExLSVRZFuHy2tT1Z Bug2ADy99Z6qnGObiHAlQQj2JfHzszPOAJZX8k/ou4VB1WToCzIGCCMgSvrCqiMCFPj55R+s ArEz84sczVpmwujWwS2coxAVWOUVj8a+/NzZoqgi2GxjNHVNHJir4K3fMm9aADHRpysVUTdw fLJ9ya1tpCbrijJGhhUJBxuCdbUYtM55gOTAod9M+9fPk+QMt4MqxFf9yJXHKSVojjFnuUln m156Aocthzl2KezLxnde44FSblHDG7LtcSxhI0CmDS/lWZl5FPswDxjexBt8uaAwCgJUdr7x u6Q3ydTst6UXrzEowtKo7utm8L823gKcNjktKhDGHpddseC5RgPIWwp7/QDb4uiPw2Y6UI3n BH6x7dYcV0bQfsHtJ1ytdWhI5GgmPZsWoLBHtZg/065R
Message-ID:	<4c236fdb-c6c7-64a9-5a9b-4ee9d05b938b@gmail.com>
Date:	Mon, 14 May 2018 08:40:02 -0400
User-Agent:	Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.7.0
MIME-Version:	1.0
In-Reply-To:	<18bf68cd-7681-2dcc-f360-252cbfeab7a7@t-online.de>
X-IsSubscribed:	yes

On 5/8/2018 3:28 PM, Hans-Bernhard Bröker wrote:
> Am 08.05.2018 um 13:22 schrieb David Spencer:
>> Morning,
>>
>> I am trying to get CYGWIN Version 2.8, this is the only version
>> approved for our system at present, 


So your company is stating it wants to use buggy and susceptible
applications.  I don't think so.  Go back to the IT security team and
state that 2.10 is the latest version of Cygwin and ask if it is okay.
If not then ask them to provide you with a suitable version.

>
> Providing that is, to a great extent, actually the job of whoever
> approves versions of Cygwin for you.
>

The company should provide a common mirror of approved applications.

> That's because the version number of cygwin itself barely begins to
> define an actual fixed configuration of the whole Cygwin environment
> you'll be installing: that's _one_ package whose version number has been
> nailed down, but _hundreds_ of others left totally floating.
> 

The version number of the Cygwin DLL doesn't provide the versions of all
of the components possible to use.  A company approving a specific
version of Cygwin DLL is clueless as to what Cygwin is.

> The only practical way of defining an installation of which it can even
> make sense to call it "approved" is to host a fixed mirror repository
> that's controlled by whoever does the approving, inside the organization
> that requires said approval.
> 

Exactly!

-- 
cyg Simple

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -