Latest Cygwin Mercurial verson still uses SSL3

Chris Lilley
Thu Nov 6 12:37:00 GMT 2014

Hello Cygwin,

Mercurial is a version control system. Mercurial version 3.2 removes
the SSL3 POODLE vulnerability [1].

However, the latest cygwin installer (downloaded today, 6 Nov 2014)
says the current version number of Mercurial is 3.0.1-1. Mercurial
repositories that have disabled SSL3 can no longer be accessed using

Therefore, this is a Cygwin-specific issue.

Are there plans to port Mercurial 3.2 to Cygwin?


Best regards,
 Chris Lilley, Technical Director, W3C Interaction Domain

Problem reports:
Unsubscribe info:

More information about the Cygwin mailing list