DMARC-Filter: OpenDMARC Filter v1.4.2 delorie.com 57SDjkWu1013808
Authentication-Results: delorie.com; dmarc=pass (p=none dis=none) header.from=cygwin.com
Authentication-Results: delorie.com; spf=pass smtp.mailfrom=cygwin.com
DKIM-Filter: OpenDKIM Filter v2.11.0 delorie.com 57SDjkWu1013808
Authentication-Results: delorie.com;
	dkim=pass (1024-bit key, unprotected) header.d=cygwin.com header.i=@cygwin.com header.a=rsa-sha256 header.s=default header.b=KGyspVrC
X-Recipient: archive-cygwin@delorie.com
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 66F343851A92
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1756388744;
	bh=PGKuUcK2tGI9R+jU4Nb94x8nI3twcWq0ywzKjZx5dIQ=;
	h=Date:Subject:To:List-Id:List-Unsubscribe:List-Archive:List-Post:
	 List-Help:List-Subscribe:From:Reply-To:From;
	b=KGyspVrCURIkonzf2ttUDfa1OyvTvJe7UHCybAuivFgHh1q8PpGVgK1ZYKlm5yir3
	 jvqtchzEubwhO9C119IyvnwUAiduoNhkHLxVE2bfpCnxyjAXgMNbNZ1x6xGSK329lH
	 tSqin+CQ9L1PiTws0BKNAgqm1KlHA8f5/7O2WnNM=
X-Original-To: cygwin@cygwin.com
Delivered-To: cygwin@cygwin.com
DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 414903851A9D
ARC-Filter: OpenARC Filter v1.0.0 sourceware.org 414903851A9D
ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1756388704; cv=none;
 b=AGqag/sOs+SWn2Jx0fLkBOGczoVvFAx8PzPfLeQRMrONIja2Ncycqd66L2exsBhkl0aFgcVoN9/Vj/ONmiZnsmN4SAiya5Ym3nUkHdzzRYPYQkAKVRzX9Hjg2lUZxZeGdFLMRjG9K3lZnefyTWlfmKx68K5GrWvMqfLN+986CXk=
ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key;
 t=1756388704; c=relaxed/simple;
 bh=4ARr1nRGdZmkE37XR7CpgsCTpUs1wY6duBI0X3yTwy0=;
 h=MIME-Version:From:Date:Message-ID:Subject:To;
 b=sqKEIXjs27xVzDEWmnl3Enzsa1+BoOlt3IqIaPSuwFEuYI8ZeiK0Irp7gYAZDdRvfm13lzhHlCy95XYUpYq4rV0OZI70tBslzzyITzyjMi6GMUJPtiAYkN0g91LCJLXU/EQNKhOnCgQlE5Vhr6Wsm71cMa+YTxKqmMKbKeLMOWI=
ARC-Authentication-Results: i=1; server2.sourceware.org
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 414903851A9D
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20230601; t=1756388674; x=1756993474;
 h=to:subject:message-id:date:from:mime-version:x-gm-message-state
 :from:to:cc:subject:date:message-id:reply-to;
 bh=4ARr1nRGdZmkE37XR7CpgsCTpUs1wY6duBI0X3yTwy0=;
 b=IjMQDdUPs/4hoUdsVC1V8GWd9aKJtixJGEceDuQjx5eqdsMBsu/HJImQGex6UAfyQY
 7DSTYz/Swc0kdCzvkjm7nxwNECQbMY4de/ovnBYjC4xJAZqQfZCoBsseGdihVrh7ZfJu
 qHdf590MmDAbxStRkhRHarCEgaQNT8Slv/ntK0UfUE4sUN7XMkhjroHePfDMMoIbbscx
 jsHzNB8fF/zg68k37J3+zTDNEEinHctfqmMi6uxC/iUh7FriPI/d6e5LU4GGuJbZpnMR
 SE1tMvD5s0FGesnMjCdj5n/j57JRfKnwawjESJgSqCHmxAOenEbycK+Z6HGdhNkW4l/a
 CnzQ==
X-Gm-Message-State: AOJu0YwgH/6WK2TAJmlmbkE1XWtS7KjglUX+pKxAvmm4twd3euSGS2C0
 30r6CKx/UlmltVDfiZs/d8r/QIbu0n3TOJEtfH7Qpghm/tLnRnYTcgKyJdr4bdnk9jTVfwAtaML
 mb+LlsqtgNTSzfO+57TSrgLkERIwKlaLxKEc5
X-Gm-Gg: ASbGncsli+jRDUpMwkCpMvbfJBL+fq4jtRjoZogud1dooHmchOCy7FBMN7mbzOn5e7i
 5lhcytchMinMILfT6z+H2JoyYi0kREPr8nHHky+vLjdvCYtaYx1g3ZKo4g7evM+klOoltNmqCMg
 IITqOYtWEHaYz5dBmbob7xHFEZ5wcdvXRBAYToHut8iDoWZDyEgpebOWZKy24TJDXwGliz4Qk+a
 NzW03fFdsKjKfkeHdD4yTJ7x/DotYyPA3TELVLb6aOIxmXKD6U=
X-Google-Smtp-Source: AGHT+IGT3Ge+E1ZtuMInYgBipDvM9FJLZtLG4YJy6Bm05MrcE27XstXzR25fwG+fzyLpHxi2tNQvlxc5LlK5qJEzs9k=
X-Received: by 2002:a05:6808:10c4:b0:435:7863:9a85 with SMTP id
 5614622812f47-43785321f26mr12915256b6e.26.1756388674043; Thu, 28 Aug 2025
 06:44:34 -0700 (PDT)
MIME-Version: 1.0
Date: Thu, 28 Aug 2025 09:44:23 -0400
X-Gm-Features: Ac12FXxSv7laahEtzlCKV8WZFZSMfAJTS4lYTOIMwdhFs65ZsoxL1iOVfY54QSo
Message-ID: <CAAF84SXpLDJDCmRExQiKu0+LeUtUo1yc030H3jisvi+ci99_eg@mail.gmail.com>
Subject: git critical security vulnerability
To: cygwin@cygwin.com
X-Content-Filtered-By: Mailman/MimeDel 2.1.30
X-BeenThere: cygwin@cygwin.com
X-Mailman-Version: 2.1.30
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin@cygwin.com>
List-Help: <mailto:cygwin-request@cygwin.com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request@cygwin.com?subject=subscribe>
From: Michael Cook via Cygwin <cygwin@cygwin.com>
Reply-To: Michael Cook <michael@waxrat.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: "Cygwin" <cygwin-bounces~archive-cygwin=delorie.com@cygwin.com>

Apparently, there's a critical security vulnerability in git.

https://github.blog/open-source/git/git-security-vulnerabilities-announced-6/

Cygwin is currently at 2.45.1.
We're being urged to upgrade to 2.50.1.

What do we need to do to get Cygwin's git upgraded?

Michael

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple
