Security update needed for mercurial (upload error: doesn't follow naming convention)
Warren Young
wyml@etr-usa.com
Wed Apr 20 18:16:00 GMT 2016
On Apr 20, 2016, at 10:56 AM, Jari Aalto <jari.aalto@cante.net> wrote:
>
>> 3.7.3 as a security release, with fixes for:
>>
>> CVE-2016-3630 Mercurial: remote code execution in binary delta decoding
>> CVE-2016-3068 Mercurial: arbitrary code execution with Git subrepos
>> CVE-2016-3069 Mercurial: arbitrary code execution when converting Git repos
>
> New release uploaded, but I got this message (x64)?
>
> ERROR: tar file 'mercurial-3.7.3.tar.gz' in package 'mercurial' doesn't follow naming convention
> ERROR: error while reading uploaded packages for Jari Aalto
I take from that that you are not using cygport for that package? This sort of detail is one of the things that cygport takes care of for you.
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
More information about the Cygwin
mailing list