Re: Subscribing Apple people to git-security@googlegroups.com

From: Johannes Schindelin <johannes.schindelin@gmx.de>
Date: Jul 10, 2018, 13:24 UTC
Message-ID: <nycvar.QRO.7.76.6.1807101521060.75@tvgsbejvaqbjf.bet>
In-Reply-To: <20180702195016.GA17102@sigill.intra.peff.net>

Hi Peff,

On Mon, 2 Jul 2018, Jeff King wrote:

Show 13 quoted lines

> On Mon, Jul 02, 2018 at 09:29:41PM +0200, Christian Couder wrote:
> 
> > When people complained a month ago about the MacOS package on
> > https://git-scm.com/ not being up-to-date after the Git security
> > release, I got in touch with Apple people GitLab has been working with
> > to see if they could help on this.
> 
> Unfortunately I don't think this will quite solve the issue we had, just
> because people get their copy of Git in various ways. So Homebrew
> updated pretty promptly, but people going to git-scm.com to find a
> binary package were left without help. Likewise, this will help people
> getting Git as part of XCode, but not people gettin the package from
> git-scm.com.

Indeed. The fix for that would be to automate those official Git for macOS builds. I suggested exactly that to Tim: https://github.com/gitgitgadget/git/pull/7#issuecomment-403820169

Ciao, Dscho