X-Recipient:	archive-cygwin AT delorie DOT com
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.3.2 sourceware.org 051263857020
Authentication-Results:	sourceware.org;
	dmarc=none (p=none dis=none) header.from=dinwoodie.org
Authentication-Results:	sourceware.org;
	spf=pass smtp.mailfrom=adam AT dinwoodie DOT org
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=dinwoodie.org; s=google;
	h=mime-version:from:date:message-id:subject:to;
	bh=XAr594F7dpd24efckX8NomWqWZEHLCJ8QHpfndjDi7E=;
	b=dHxFJcS0kcWx6IesDc7+gBYy2NU/7d1x9g8cnzRfieQd8sc1X+RJg+EIm1GdV6ePOF
	bV2hTqivRG8qTZvIn+MDOjRfYu1rUMUC+ocZSUwxTrEGnoYoieUXfRjb5pJ0VBc46gfw
	wOzZJUoew+mKQSFb2CNmqZWRi2z76DqXqf1dU=
X-Google-DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=1e100.net; s=20161025;
	h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
	bh=XAr594F7dpd24efckX8NomWqWZEHLCJ8QHpfndjDi7E=;
	b=qF8mbmavsjNVZiTsxzco91BXf5iU/4PbdztHoN07PJVmqDKlTV0n3cbga4bW+zpdPV
	HjkAHu4KxlIrHviOtfv68JcsGaQOh7G8DQe817y7pNcvW9sBfPR+j4NHS9ZNFWnG2si7
	r95HsMIMi7tceegyXftTSOZoLRoQJTBQ1/EmLE9Z+0CjPztuBIq43KuBlPgcHnSSOqLy
	gaGimZUJXY0rAdCZ7izfWqE0yMSHxpOU72hKY5FFjgABgCzl3SrGsUDcSrFW/C0hwnI8
	js16ZcE9QWli0GjnPwDCb3pVrvWVqutlEwbjHR34XBS+kQuWWSsa3Awocm+Izm2tQ0xv
	4FmA==
X-Gm-Message-State:	AOAM530vb0qDmsSWYTSaddYkltr7hTK9MvfTh+IoOPpt4KT131PMnRg/
	T8qg9Xnnw8msoiBodLeOGg2pZxJnALjJURzDlCTUhpDiQvpFnA==
X-Google-Smtp-Source:	ABdhPJyjnrdmCYLZlO4az1qzrJYVnQ6Z2+8CEIY85xZkqj8G+Lya80NZTjzQCsLP/HPtczoMDSLSjCDblaLl0QzsWqU=
X-Received:	by 2002:a0c:f9cc:: with SMTP id j12mr2214533qvo.15.1615375489383;
	Wed, 10 Mar 2021 03:24:49 -0800 (PST)
MIME-Version:	1.0
From:	Adam Dinwoodie <adam AT dinwoodie DOT org>
Date:	Wed, 10 Mar 2021 11:24:13 +0000
Message-Id:	<announce.CA+kUOanEk04c_Cq=siHq8_nsGE6eDTp_jiM44j-kZmcyPoPd3Q@mail.gmail.com>
Subject:	[ANNOUNCEMENT] Security update: Git v2.30.2-1
To:	cygwin AT cygwin DOT com
X-Spam-Status:	No, score=-1.8 required=5.0 tests=BAYES_00, DKIM_SIGNED,
	DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, KAM_NUMSUBJECT, RCVD_IN_DNSWL_NONE,
	SPF_HELO_NONE, SPF_PASS, TXREP autolearn=no autolearn_force=no version=3.4.2
X-Spam-Checker-Version:	SpamAssassin 3.4.2 (2018-09-13) on
	server2.sourceware.org
X-BeenThere:	cygwin-announce AT cygwin DOT com
X-Mailman-Version:	2.1.29
X-Mailer:	Perl5 Mail::Internet v2.20
X-BeenThere:	cygwin AT cygwin DOT com
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Reply-To:	cygwin AT cygwin DOT com
Sender:	"Cygwin" <cygwin-bounces AT cygwin DOT com>

Version 2.30.2-1 of Git has been uploaded and should be coming soon to
a mirror near you.

This update fixes CVE-2021-21300: On case-insensitive file systems
with support for symbolic links, if Git is configured globally to
apply delay-capable clean/smudge filters (such as Git LFS), Git could
be fooled into running remote code during a clone.

This update includes the following packages:

- git
- git-cvs
- git-debuginfo
- git-email
- git-gui
- gitk
- git-p4
- git-svn

This is an update to the latest upstream release.

For a full list of the upstream changes in this release, please refer to
the upstream changelogs:

https://git.kernel.org/cgit/git/git.git/tree/Documentation/RelNotes
https://kernel.googlesource.com/pub/scm/git/git.git/+/master/Documentation/RelNotes/
https://github.com/git/git/tree/master/Documentation/RelNotes

Enjoy!
--
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -