Does winmerge provide any updates of any security updates or security attacks

[fernandes1021]

I am planning to use WinMerge at my firm, the concern that our security team has of winmerge providing any security updates or security hacks.

[sdottaka]

WinMerge has never been released in the form of a security update. WinMerge is scheduled to be released on a three-month cycle. Unless there is a serious bug, it will be released in this cycle.

[fernandes1021]

Hi Takashi Sawanaka, If there are security vulnerabilities in the software, are the users of winmerge notified. Like the one we had for log4j

Thanks Hill

[Gitoffthelawn]

@fernandes1021

Hi Hill,

Please see https://github.com/WinMerge/winmerge/discussions/1083

[sdottaka]

If there are security vulnerabilities in the software, are the users of winmerge notified.

The release notes state that vulnerabilities and bug fixes have been made. (https://github.com/WinMerge/winmerge/releases)

You can be notified that WinMerge has been released by clicking the Watch button at the top right of https://github.com/WinMerge/winmerge/.

[Gitoffthelawn]

@sdottaka BTW, I haven't seen any repos actually use the functionality yet, but you can now issue specific security alerts that are automatically issued to everyone who checks that "Security alerts" checkbox.