This is the mail archive of the
cygwin
mailing list for the Cygwin project.
Latest Cygwin Mercurial verson still uses SSL3
- From: Chris Lilley <chris at w3 dot org>
- To: cygwin at cygwin dot com
- Date: Thu, 6 Nov 2014 13:37:46 +0100
- Subject: Latest Cygwin Mercurial verson still uses SSL3
- Authentication-results: sourceware.org; auth=none
Hello Cygwin,
Mercurial is a version control system. Mercurial version 3.2 removes
the SSL3 POODLE vulnerability [1].
However, the latest cygwin installer (downloaded today, 6 Nov 2014)
says the current version number of Mercurial is 3.0.1-1. Mercurial
repositories that have disabled SSL3 can no longer be accessed using
Cygwin.
Therefore, this is a Cygwin-specific issue.
Are there plans to port Mercurial 3.2 to Cygwin?
[1] http://mercurial.selenic.com/wiki/UpgradeNotes
--
Best regards,
Chris Lilley, Technical Director, W3C Interaction Domain
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple