Security update needed for mercurial (upload error: doesn't follow naming convention)

Warren Young wyml@etr-usa.com
Wed Apr 20 18:16:00 GMT 2016


On Apr 20, 2016, at 10:56 AM, Jari Aalto <jari.aalto@cante.net> wrote:
> 
>> 3.7.3 as a security release, with fixes for:
>> 
>> CVE-2016-3630 Mercurial: remote code execution in binary delta decoding
>> CVE-2016-3068 Mercurial: arbitrary code execution with Git subrepos
>> CVE-2016-3069 Mercurial: arbitrary code execution when converting Git repos
> 
> New release uploaded, but I got this message (x64)?
> 
> ERROR: tar file 'mercurial-3.7.3.tar.gz' in package 'mercurial' doesn't follow naming convention
> ERROR: error while reading uploaded packages for Jari Aalto

I take from that that you are not using cygport for that package?  This sort of detail is one of the things that cygport takes care of for you.
--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple



More information about the Cygwin mailing list