From: "brian m. carlson" <sandals@crustytoothpaste.net>
To: Robert Smith <robsmi_ms@hotmail.com>
Cc: "git@vger.kernel.org" <git@vger.kernel.org>
Subject: Re: Request for Curl.exe update included in Git binaries
Date: Mon, 25 Sep 2023 21:54:35 +0000 [thread overview]
Message-ID: <ZRIBmxT4mh5Rlt3-@tapette.crustytoothpaste.net> (raw)
In-Reply-To: <IA1PR02MB9088F7E0AB55FE03CF0C38B186FCA@IA1PR02MB9088.namprd02.prod.outlook.com>
[-- Attachment #1: Type: text/plain, Size: 904 bytes --]
On 2023-09-25 at 15:37:46, Robert Smith wrote:
> Hello,
Hey,
> Regarding this CVE:
>
> https://curl.se/docs/CVE-2023-38039.html
>
> Is there any plan to update Git for Windows to include the updated 8.3.0 Curl binaries?
The Git project doesn't ship any binaries at all, and we don't ship
curl. Git for Windows does ship a substantial amount of other software,
including curl. You can find their issue tracker at
https://github.com/git-for-windows/git/issues, but I believe this has
already been fixed in https://github.com/git-for-windows/git/issues/4605
and will be included in the next version.
I'm not certain about their release policy, but I seem to recall that
they don't issue updates for dependent packages until a new release
would normally be done. To be certain, you'd have to inquire with them.
--
brian m. carlson (he/him or they/them)
Toronto, Ontario, CA
[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 263 bytes --]
next prev parent reply other threads:[~2023-09-25 21:54 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2023-09-25 15:37 Request for Curl.exe update included in Git binaries Robert Smith
2023-09-25 21:54 ` brian m. carlson [this message]
2023-09-26 13:53 ` Johannes Schindelin
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=ZRIBmxT4mh5Rlt3-@tapette.crustytoothpaste.net \
--to=sandals@crustytoothpaste.net \
--cc=git@vger.kernel.org \
--cc=robsmi_ms@hotmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).