From: Erik Faye-Lund <kusmabite@gmail.com>
Date: Mon, 25 Jun 2012 13:10:48 GMT
Subject: Re: security flaw with smart http
Message-ID: <CABPQNSYx5cz3ZadenP7xE2+KeQRVqmwq_fehe6tC6vQqyKm_tw@mail.gmail.com>
In-Reply-To: <87ipef5yzr.fsf@visionobjects.com>

On Mon, Jun 25, 2012 at 2:59 PM, Ivan Kanis <ivan.kanis@googlemail.com> wrote:
> Philippe Vaucher <philippe.vaucher@gmail.com> a écrit
>
>>> I do not recall ever releasing 1.0.7.4, nor having smart http
>>> support before v1.6.6, by the way.
>>
>> It sounds very likely that he meant 1.7.4 no?
>
> It's compiled from a 1.7.0.4 tar ball, amusingly git --version says 1.0.7.4

Could it be that there's a typo in the "version"-file of that release?
AFAICT, the tag at github looks correct (no "version"-file, but what's
in GIT-VERSION-GEN looks correct). Unfortunately, the current official
release-archive at google code
(http://code.google.com/p/git-core/downloads/list) doesn't contain
that particular release, nor does the old official release-archive
(http://www.kernel.org/pub/software/scm/git/), so it's difficult to
tell.