delorie.com/archives/browse.cgi   search  
Mail Archives: cygwin/2025/08/28/09:45:46

DMARC-Filter: OpenDMARC Filter v1.4.2 delorie.com 57SDjkWu1013808
Authentication-Results: delorie.com; dmarc=pass (p=none dis=none) header.from=cygwin.com
Authentication-Results: delorie.com; spf=pass smtp.mailfrom=cygwin.com
DKIM-Filter: OpenDKIM Filter v2.11.0 delorie.com 57SDjkWu1013808
Authentication-Results: delorie.com;
dkim=pass (1024-bit key, unprotected) header.d=cygwin.com header.i=@cygwin.com header.a=rsa-sha256 header.s=default header.b=KGyspVrC
X-Recipient: archive-cygwin AT delorie DOT com
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 66F343851A92
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
s=default; t=1756388744;
bh=PGKuUcK2tGI9R+jU4Nb94x8nI3twcWq0ywzKjZx5dIQ=;
h=Date:Subject:To:List-Id:List-Unsubscribe:List-Archive:List-Post:
List-Help:List-Subscribe:From:Reply-To:From;
b=KGyspVrCURIkonzf2ttUDfa1OyvTvJe7UHCybAuivFgHh1q8PpGVgK1ZYKlm5yir3
jvqtchzEubwhO9C119IyvnwUAiduoNhkHLxVE2bfpCnxyjAXgMNbNZ1x6xGSK329lH
tSqin+CQ9L1PiTws0BKNAgqm1KlHA8f5/7O2WnNM=
X-Original-To: cygwin AT cygwin DOT com
Delivered-To: cygwin AT cygwin DOT com
DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 414903851A9D
ARC-Filter: OpenARC Filter v1.0.0 sourceware.org 414903851A9D
ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1756388704; cv=none;
b=AGqag/sOs+SWn2Jx0fLkBOGczoVvFAx8PzPfLeQRMrONIja2Ncycqd66L2exsBhkl0aFgcVoN9/Vj/ONmiZnsmN4SAiya5Ym3nUkHdzzRYPYQkAKVRzX9Hjg2lUZxZeGdFLMRjG9K3lZnefyTWlfmKx68K5GrWvMqfLN+986CXk=
ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key;
t=1756388704; c=relaxed/simple;
bh=4ARr1nRGdZmkE37XR7CpgsCTpUs1wY6duBI0X3yTwy0=;
h=MIME-Version:From:Date:Message-ID:Subject:To;
b=sqKEIXjs27xVzDEWmnl3Enzsa1+BoOlt3IqIaPSuwFEuYI8ZeiK0Irp7gYAZDdRvfm13lzhHlCy95XYUpYq4rV0OZI70tBslzzyITzyjMi6GMUJPtiAYkN0g91LCJLXU/EQNKhOnCgQlE5Vhr6Wsm71cMa+YTxKqmMKbKeLMOWI=
ARC-Authentication-Results: i=1; server2.sourceware.org
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 414903851A9D
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1756388674; x=1756993474;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=4ARr1nRGdZmkE37XR7CpgsCTpUs1wY6duBI0X3yTwy0=;
b=IjMQDdUPs/4hoUdsVC1V8GWd9aKJtixJGEceDuQjx5eqdsMBsu/HJImQGex6UAfyQY
7DSTYz/Swc0kdCzvkjm7nxwNECQbMY4de/ovnBYjC4xJAZqQfZCoBsseGdihVrh7ZfJu
qHdf590MmDAbxStRkhRHarCEgaQNT8Slv/ntK0UfUE4sUN7XMkhjroHePfDMMoIbbscx
jsHzNB8fF/zg68k37J3+zTDNEEinHctfqmMi6uxC/iUh7FriPI/d6e5LU4GGuJbZpnMR
SE1tMvD5s0FGesnMjCdj5n/j57JRfKnwawjESJgSqCHmxAOenEbycK+Z6HGdhNkW4l/a
CnzQ==
X-Gm-Message-State: AOJu0YwgH/6WK2TAJmlmbkE1XWtS7KjglUX+pKxAvmm4twd3euSGS2C0
30r6CKx/UlmltVDfiZs/d8r/QIbu0n3TOJEtfH7Qpghm/tLnRnYTcgKyJdr4bdnk9jTVfwAtaML
mb+LlsqtgNTSzfO+57TSrgLkERIwKlaLxKEc5
X-Gm-Gg: ASbGncsli+jRDUpMwkCpMvbfJBL+fq4jtRjoZogud1dooHmchOCy7FBMN7mbzOn5e7i
5lhcytchMinMILfT6z+H2JoyYi0kREPr8nHHky+vLjdvCYtaYx1g3ZKo4g7evM+klOoltNmqCMg
IITqOYtWEHaYz5dBmbob7xHFEZ5wcdvXRBAYToHut8iDoWZDyEgpebOWZKy24TJDXwGliz4Qk+a
NzW03fFdsKjKfkeHdD4yTJ7x/DotYyPA3TELVLb6aOIxmXKD6U=
X-Google-Smtp-Source: AGHT+IGT3Ge+E1ZtuMInYgBipDvM9FJLZtLG4YJy6Bm05MrcE27XstXzR25fwG+fzyLpHxi2tNQvlxc5LlK5qJEzs9k=
X-Received: by 2002:a05:6808:10c4:b0:435:7863:9a85 with SMTP id
5614622812f47-43785321f26mr12915256b6e.26.1756388674043; Thu, 28 Aug 2025
06:44:34 -0700 (PDT)
MIME-Version: 1.0
Date: Thu, 28 Aug 2025 09:44:23 -0400
X-Gm-Features: Ac12FXxSv7laahEtzlCKV8WZFZSMfAJTS4lYTOIMwdhFs65ZsoxL1iOVfY54QSo
Message-ID: <CAAF84SXpLDJDCmRExQiKu0+LeUtUo1yc030H3jisvi+ci99_eg@mail.gmail.com>
Subject: git critical security vulnerability
To: cygwin AT cygwin DOT com
X-Content-Filtered-By: Mailman/MimeDel 2.1.30
X-BeenThere: cygwin AT cygwin DOT com
X-Mailman-Version: 2.1.30
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From: Michael Cook via Cygwin <cygwin AT cygwin DOT com>
Reply-To: Michael Cook <michael AT waxrat DOT com>
Sender: "Cygwin" <cygwin-bounces~archive-cygwin=delorie DOT com AT cygwin DOT com>

Apparently, there's a critical security vulnerability in git.

https://github.blog/open-source/git/git-security-vulnerabilities-announced-6/

Cygwin is currently at 2.45.1.
We're being urged to upgrade to 2.50.1.

What do we need to do to get Cygwin's git upgraded?

Michael

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -


  webmaster     delorie software   privacy  
  Copyright © 2019   by DJ Delorie     Updated Jul 2019