Re: security flaw with smart http

On Mon, Jun 25, 2012 at 2:59 PM, Ivan Kanis [off-list ref] wrote:

Philippe Vaucher [off-list ref] a écrit

quoted

quoted

I do not recall ever releasing 1.0.7.4, nor having smart http
support before v1.6.6, by the way.

It sounds very likely that he meant 1.7.4 no?

It's compiled from a 1.7.0.4 tar ball, amusingly git --version says 1.0.7.4

Could it be that there's a typo in the "version"-file of that release?
AFAICT, the tag at github looks correct (no "version"-file, but what's
in GIT-VERSION-GEN looks correct). Unfortunately, the current official
release-archive at google code
(http://code.google.com/p/git-core/downloads/list) doesn't contain
that particular release, nor does the old official release-archive
(http://www.kernel.org/pub/software/scm/git/), so it's difficult to
tell.