Re: Mercurial update needed for security fixes
- Date: Mon, 25 Sep 2017 12:35:37 -0500
- From: Vince Rice <vrice@xxxxxxxxxxxxxxxxxxxx>
- Subject: Re: Mercurial update needed for security fixes
> On Sep 25, 2017, at 12:31 PM, Andy Moreton <andrewjmoreton@xxxxxxxxx> wrote:
> On Mon 18 Sep 2017, Ken Brown wrote:
>> On 9/18/2017 11:27 AM, Andy Moreton wrote:
>>> On Thu 17 Aug 2017, Andy Moreton wrote:
>>>> Can the mercurial maintainer please update to upstream Hg 4.3.1, to get
>>>> the fixes for CVE-2017-1000115 and CVE-2017-1000116.
>> I don't know if he reads the list. I'm adding him to the Cc.
> Still no response. If the maintiner does not read the project list or
> respond to email, then all of his packages are effectively abandoned.
> Can we please have a *security update* for mercurial ?
And if "effectively abandoned," then there's no one to update them. Are you volunteering?
Problem reports: http://cygwin.com/problems.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple