DMARC-Filter: OpenDMARC Filter v1.4.2 delorie.com 57SDjkWu1013808 Authentication-Results: delorie.com; dmarc=pass (p=none dis=none) header.from=cygwin.com Authentication-Results: delorie.com; spf=pass smtp.mailfrom=cygwin.com DKIM-Filter: OpenDKIM Filter v2.11.0 delorie.com 57SDjkWu1013808 Authentication-Results: delorie.com; dkim=pass (1024-bit key, unprotected) header.d=cygwin.com header.i=@cygwin.com header.a=rsa-sha256 header.s=default header.b=KGyspVrC X-Recipient: archive-cygwin AT delorie DOT com DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 66F343851A92 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com; s=default; t=1756388744; bh=PGKuUcK2tGI9R+jU4Nb94x8nI3twcWq0ywzKjZx5dIQ=; h=Date:Subject:To:List-Id:List-Unsubscribe:List-Archive:List-Post: List-Help:List-Subscribe:From:Reply-To:From; b=KGyspVrCURIkonzf2ttUDfa1OyvTvJe7UHCybAuivFgHh1q8PpGVgK1ZYKlm5yir3 jvqtchzEubwhO9C119IyvnwUAiduoNhkHLxVE2bfpCnxyjAXgMNbNZ1x6xGSK329lH tSqin+CQ9L1PiTws0BKNAgqm1KlHA8f5/7O2WnNM= X-Original-To: cygwin AT cygwin DOT com Delivered-To: cygwin AT cygwin DOT com DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 414903851A9D ARC-Filter: OpenARC Filter v1.0.0 sourceware.org 414903851A9D ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1756388704; cv=none; b=AGqag/sOs+SWn2Jx0fLkBOGczoVvFAx8PzPfLeQRMrONIja2Ncycqd66L2exsBhkl0aFgcVoN9/Vj/ONmiZnsmN4SAiya5Ym3nUkHdzzRYPYQkAKVRzX9Hjg2lUZxZeGdFLMRjG9K3lZnefyTWlfmKx68K5GrWvMqfLN+986CXk= ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1756388704; c=relaxed/simple; bh=4ARr1nRGdZmkE37XR7CpgsCTpUs1wY6duBI0X3yTwy0=; h=MIME-Version:From:Date:Message-ID:Subject:To; b=sqKEIXjs27xVzDEWmnl3Enzsa1+BoOlt3IqIaPSuwFEuYI8ZeiK0Irp7gYAZDdRvfm13lzhHlCy95XYUpYq4rV0OZI70tBslzzyITzyjMi6GMUJPtiAYkN0g91LCJLXU/EQNKhOnCgQlE5Vhr6Wsm71cMa+YTxKqmMKbKeLMOWI= ARC-Authentication-Results: i=1; server2.sourceware.org DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 414903851A9D X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1756388674; x=1756993474; h=to:subject:message-id:date:from:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=4ARr1nRGdZmkE37XR7CpgsCTpUs1wY6duBI0X3yTwy0=; b=IjMQDdUPs/4hoUdsVC1V8GWd9aKJtixJGEceDuQjx5eqdsMBsu/HJImQGex6UAfyQY 7DSTYz/Swc0kdCzvkjm7nxwNECQbMY4de/ovnBYjC4xJAZqQfZCoBsseGdihVrh7ZfJu qHdf590MmDAbxStRkhRHarCEgaQNT8Slv/ntK0UfUE4sUN7XMkhjroHePfDMMoIbbscx jsHzNB8fF/zg68k37J3+zTDNEEinHctfqmMi6uxC/iUh7FriPI/d6e5LU4GGuJbZpnMR SE1tMvD5s0FGesnMjCdj5n/j57JRfKnwawjESJgSqCHmxAOenEbycK+Z6HGdhNkW4l/a CnzQ== X-Gm-Message-State: AOJu0YwgH/6WK2TAJmlmbkE1XWtS7KjglUX+pKxAvmm4twd3euSGS2C0 30r6CKx/UlmltVDfiZs/d8r/QIbu0n3TOJEtfH7Qpghm/tLnRnYTcgKyJdr4bdnk9jTVfwAtaML mb+LlsqtgNTSzfO+57TSrgLkERIwKlaLxKEc5 X-Gm-Gg: ASbGncsli+jRDUpMwkCpMvbfJBL+fq4jtRjoZogud1dooHmchOCy7FBMN7mbzOn5e7i 5lhcytchMinMILfT6z+H2JoyYi0kREPr8nHHky+vLjdvCYtaYx1g3ZKo4g7evM+klOoltNmqCMg IITqOYtWEHaYz5dBmbob7xHFEZ5wcdvXRBAYToHut8iDoWZDyEgpebOWZKy24TJDXwGliz4Qk+a NzW03fFdsKjKfkeHdD4yTJ7x/DotYyPA3TELVLb6aOIxmXKD6U= X-Google-Smtp-Source: AGHT+IGT3Ge+E1ZtuMInYgBipDvM9FJLZtLG4YJy6Bm05MrcE27XstXzR25fwG+fzyLpHxi2tNQvlxc5LlK5qJEzs9k= X-Received: by 2002:a05:6808:10c4:b0:435:7863:9a85 with SMTP id 5614622812f47-43785321f26mr12915256b6e.26.1756388674043; Thu, 28 Aug 2025 06:44:34 -0700 (PDT) MIME-Version: 1.0 Date: Thu, 28 Aug 2025 09:44:23 -0400 X-Gm-Features: Ac12FXxSv7laahEtzlCKV8WZFZSMfAJTS4lYTOIMwdhFs65ZsoxL1iOVfY54QSo Message-ID: Subject: git critical security vulnerability To: cygwin AT cygwin DOT com X-Content-Filtered-By: Mailman/MimeDel 2.1.30 X-BeenThere: cygwin AT cygwin DOT com X-Mailman-Version: 2.1.30 List-Id: General Cygwin discussions and problem reports List-Archive: List-Post: List-Help: List-Subscribe: , From: Michael Cook via Cygwin Reply-To: Michael Cook Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: "Cygwin" Apparently, there's a critical security vulnerability in git. https://github.blog/open-source/git/git-security-vulnerabilities-announced-6/ Cygwin is currently at 2.45.1. We're being urged to upgrade to 2.50.1. What do we need to do to get Cygwin's git upgraded? Michael -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation: https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple