4 ms·
>In addition, the following updated versions of Git address this vulnerability: Not everyone has the patch. The Git core team has announced maintenance release
by baldfat 12y ago
>In addition, the following updated versions of Git address this vulnerability: Not everyone has the patch.
The Git core team has announced maintenance releases for all current versions of Git (v1.8.5.6, v1.9.5, v2.0.5, v2.1.4, and v2.2.1).
I have one Windows machine and went to update http://git-scm.com/download/win http://git-scm.com/download/win (preview Version 1.9.4)
It was released 3 months ago, on 2014-09-29.
https://msysgit.github.io https://msysgit.github.io (Version 1.9.5 preview BUT no documentation that this is for a security fix)
Doesn't seem like I can update my git client
- taspeotis 12y agoOne thing I want to know but haven't gotten around to figuring out who to ask is why msysgit is 1.x instead of 2.x? I saw some mention on their Github issue tracker that msysgit had been rebased on top of 2.x but the downloads don't seem to be updated. I figured I could build from source if I really wanted and the downloads would be updated eventually but ... they have not.
- akaBruce 12y agoFor whatever it's worth, I just downloaded 1.9.5 for Windows from https://msysgit.github.io/ https://msysgit.github.io/. While the release notes don't mention "CVE-2014-9390" explicitly, it does say this: Changes since Git-1.9.4-preview20140929 New Features ... Bugfixes * Safeguards against bogus file names on NTFS. Edit: Actually, there it is on their git hub releases page. https://github.com/msysgit/msysgit/releases/tag/Git-1.9.5-preview20141217 https://github.com/msysgit/msysgit/releases/tag/Git-1.9.5-pr...