DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:references
	:mime-version:content-type:in-reply-to; q=dns; s=default; b=HoKl
	1BjJ/WTRPMdBVQ24VZJDSFHxptXuDY8SbFJbmsL/yjcI8Jp8BtY2tov+qvWlhz8r
	tPMX1BuAU+9zc+/Z+aC1TXR07BT8XaxZCQB/uJN2MyTwzkN0Dfrbo6bc9M+pQh5V
	EZxyr9/cNJ0ThBDcXWDtloG/SUn5HsbX+qnhnEs=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Date: Fri, 18 Mar 2016 10:43:14 +0000
From: Adam Dinwoodie <adam@dinwoodie.org>
To: cygwin@cygwin.com
Subject: Re: [Attn] git maintainer: Remote Code Execution for git < 2.7.1
Message-ID: <20160318104314.GZ29016@dinwoodie.org>
References: <CAFo71_6ZRGH6zkb7U2rDCf1vu0jz9-w1Cmv_ccW6aRDBszEhYw@mail.gmail.com> <20160316105010.GN29016@dinwoodie.org> <CAFo71_43UGbDkvT9k+1n5KyvpUkeedd78CMUepFB3zzYwY4Kug@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <CAFo71_43UGbDkvT9k+1n5KyvpUkeedd78CMUepFB3zzYwY4Kug@mail.gmail.com>
User-Agent: Mutt/1.5.21 (2010-09-15)

On Fri, Mar 18, 2016 at 10:41:41AM +0200, Ismail Donmez wrote:
> On Wed, Mar 16, 2016 at 12:50 PM, Adam Dinwoodie <adam@dinwoodie.org> wrote:
> > On Wed, Mar 16, 2016 at 07:43:54AM +0200, Ismail Donmez wrote:
> >> Please see http://www.openwall.com/lists/oss-security/2016/03/15/5 .
> >> Would be nice to update to just released 2.7.3 version.
> >
> > Ack, thanks for the heads up.  I've been holding off on making a release
> > while investigating some test failures, but I'll try to make a new build
> > available either today or tomorrow.
> 
> Now git 2.7.4 is released with more security fixes:
> https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.7.4.txt
> :(

Yes, I spotted that last night.  I needed to do a rebuild anyway, so
I'll build this version.

Adam

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple