{"thread":{"id":"26080","subject":"[ANNOUNCE] Git 1.7.3.4, 1.6.6.3 and others","startedAt":"2010-12-16T06:02:35Z","lastAt":"2010-12-17T07:23:27Z","messageCount":2,"participants":["Junio C Hamano"],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"158204","messageId":"7v8vzqntl0.fsf@alter.siamese.dyndns.org","threadId":"26080","inReplyTo":null,"subject":"[ANNOUNCE] Git 1.7.3.4, 1.6.6.3 and others","fromName":"Junio C Hamano","fromEmail":"gitster@pobox.com","sentAt":"2010-12-16T06:02:35Z","receivedAt":"2010-12-16T06:02:35Z","isPatch":false,"sender":{"key":"gitster@pobox.com","avatar":"https://avatars.githubusercontent.com/u/54884?v=4"},"body":"The latest maintenance release Git 1.7.3.4 is available at the\nusual places:\n\n  http://www.kernel.org/pub/software/scm/git/\n\n  git-1.7.3.4.tar.{gz,bz2}\t\t\t(source tarball)\n  git-htmldocs-1.7.3.4.tar.{gz,bz2}\t\t(preformatted docs)\n  git-manpages-1.7.3.4.tar.{gz,bz2}\t\t(preformatted docs)\n\nThe RPM binary packages for a few architectures are found in:\n\n  RPMS/$arch/git-*-1.7.3.4-1.fc13.$arch.rpm\t(RPM)\n\nAmong many fixes since v1.7.3.3, it contains a fix to a recently\ndiscovered XSS vulnerability in Gitweb (CVE 2010-3906).  A backport\nto an earlier maintenance track 1.6.6.3 is available (replace 1.7.3.4 with\n1.6.6.3 above).\n\nThe Gitweb fix has also been backported to maintenance tracks of other\nearlier releases (1.7.2.5, 1.7.1.4, 1.7.0.9, 1.6.5.9, and 1.6.4.5) and are\navailable from the main repository and shortly will be available from its\nmirrors:\n\n  git://git.kernel.org/pub/scm/git/git.git/\n  git://repo.or.cz/alt-git.git/\n  git://git-core.git.sourceforge.net/gitroot/git-core/git-core/\n  git://github.com/git/git.git/\n\n----------------------------------------------------------------\n\nGit v1.7.3.4 Release Notes\n==========================\n\nFixes since v1.7.3.3\n--------------------\n\n * Smart HTTP transport used to incorrectly retry redirected POST\n   request with GET request.\n\n * \"git apply\" did not correctly handle patches that only change modes\n   if told to apply while stripping leading paths with -p option.\n\n * \"git apply\" can deal with patches with timezone formatted with a\n   colon between the hours and minutes part (e.g. \"-08:00\" instead of\n   \"-0800\").\n\n * \"git checkout\" removed an untracked file \"foo\" from the working\n   tree when switching to a branch that contains a tracked path\n   \"foo/bar\".  Prevent this, just like the case where the conflicting\n   path were \"foo\" (c752e7f..7980872d).\n\n * \"git cherry-pick\" or \"git revert\" refused to work when a path that\n   would be modified by the operation was stat-dirty without a real\n   difference in the contents of the file.\n\n * \"git diff --check\" reported an incorrect line number for added\n   blank lines at the end of file.\n\n * \"git imap-send\" failed to build under NO_OPENSSL.\n\n * Setting log.decorate configuration variable to \"0\" or \"1\" to mean\n   \"false\" or \"true\" did not work.\n\n * \"git push\" over dumb HTTP protocol did not work against WebDAV\n   servers that did not terminate a collection name with a slash.\n\n * \"git tag -v\" did not work with GPG signatures in rfc1991 mode.\n\n * The post-receive-email sample hook was accidentally broken in 1.7.3.3\n   update.\n\n * \"gitweb\" can sometimes be tricked into parrotting a filename argument\n   given in a request without properly quoting.\n\nOther minor fixes and documentation updates are also included.\n"},{"id":"158267","messageId":"7voc8kkgls.fsf@alter.siamese.dyndns.org","threadId":"26080","inReplyTo":"7v8vzqntl0.fsf@alter.siamese.dyndns.org","subject":"Re: [ANNOUNCE] Git 1.7.3.4, 1.6.6.3 and others","fromName":"Junio C Hamano","fromEmail":"gitster@pobox.com","sentAt":"2010-12-17T07:23:27Z","receivedAt":"2010-12-17T07:23:27Z","isPatch":false,"sender":{"key":"gitster@pobox.com","avatar":"https://avatars.githubusercontent.com/u/54884?v=4"},"body":"Junio C Hamano <gitster@pobox.com> writes:\n\n> The Gitweb fix has also been backported to maintenance tracks of other\n> earlier releases (1.7.2.5, 1.7.1.4, 1.7.0.9, 1.6.5.9, and 1.6.4.5) and are\n> available from the main repository and shortly will be available from its\n> mirrors:\n>\n>   git://git.kernel.org/pub/scm/git/git.git/\n>   git://repo.or.cz/alt-git.git/\n>   git://git-core.git.sourceforge.net/gitroot/git-core/git-core/\n>   git://github.com/git/git.git/\n\nI generated tarballs and rpm binary packages for these stale-maintenance\nreleases tonight.  This is just to be thorough; I would not recommend\nanybody to use 1.6.X series in 2011 when 1.7.4 series is just around the\ncorner ;-)\n"}]}