4 ms·

The version is actually 2.11.0-2ubuntu0.2, with the fix backported, as can be seen in the changelog: http://changelogs.ubuntu.com/changelogs/pool/main/g/git/gi

The version is actually 2.11.0-2ubuntu0.2, with the fix backported, as can be seen in the changelog: http://changelogs.ubuntu.com/changelogs/pool/main/g/git/git_2.11.0-2ubuntu0.2/changelog http://changelogs.ubuntu.com/changelogs/pool/main/g/git/git_... It's somewhat confusing if you run `git --version` and it reports back 2.11.0, despite being fully patched against this vulnerability.

lotsoflumens 9y ago
Thanks for the info! I've added the git-core PPA now which installs 2.14.1 . I just don't understand this screwing with version numbers and not being on the latest code.
- richardwhiuk 9y ago
  The point of having stables releases is that you have a consistent set of versions of packages including git, otherwise how is it stable?
  - lotsoflumens 9y ago
    Yes, it makes a lot of sense to ignore the real world and pretend that software will always be stable.
    - 0x0 9y ago
      Why don't you just run Debian Sid then? You'll get new packages every day and get all the fun of chasing changing features all the time :D