Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clarification on releases / release tarballs missing #676

Closed
hannob opened this issue Feb 13, 2018 · 2 comments
Closed

Clarification on releases / release tarballs missing #676

hannob opened this issue Feb 13, 2018 · 2 comments

Comments

@hannob
Copy link

hannob commented Feb 13, 2018

The commit history indicates various new releases, e.g. the latest commit referencing 5.7.3, but they are not available under "releases", the latest there is 5.6.0.

Also there is one CVE referencing a vuln in 5.7.0:
https://www.cvedetails.com/cve/CVE-2017-17497/

Can you clarify where releases happen and if there are any newer releases than 5.6.0?
Are the release tarballs stored somewhere else or are they not available?

@geoffmcl
Copy link
Contributor

@hannob thanks for your questions...

Please read VERSION.md, for a full explanation... and maybe BRANCHES.md for more...

No, there is no release later than 5.6.0... and that is the code in the current master branch... the next release would be 5.8.0, although as you may read elsewhere there may be consideration of a 5.6.1 release...

But having said that, we do try to keep the next branch, that is the development branch very STABLE, and some choose to always update to it... and we bump the version.txt value for each commit... the latest is 5.7.3...

And that vunerablity mention in the CVE for 5.7.0 has been addressed in 5.7.3... See #655 and PR #662...

That is the only way to get the latest code... and github offers a ZIP download if you do not want to get into git clone ......

Hope this answers your question... thanks...

@geoffmcl geoffmcl added this to the 5.7 milestone Feb 14, 2018
@geoffmcl
Copy link
Contributor

@hannob seems question asked and answered, so closing this... thanks...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants