MinGit v2.35.6.windows.1

MinGit for Windows v2.35.6

Changes since Git for Windows v2.35.5 (October 13 2022):

Bug Fixes

* CVE-2022-41903:

   git log has the ability to display commits using an arbitrary
   format with its --format specifiers. This functionality is also
   exposed to git archive via the export-subst gitattribute.

   When processing the padding operators (e.g., %<(, %<|(, %>(,
   %>>(, or %><( ), an integer overflow can occur in
   pretty.c::format_and_pad_commit() where a size_t is improperly
   stored as an int, and then added as an offset to a subsequent
   memcpy() call.

   This overflow can be triggered directly by a user running a
   command which invokes the commit formatting machinery (e.g., git
   log --format=...). It may also be triggered indirectly through
   git archive via the export-subst mechanism, which expands format
   specifiers inside of files within the repository during a git
   archive.

   This integer overflow can result in arbitrary heap writes, which
   may result in remote code execution.

* CVE-2022-23521:

   gitattributes are a mechanism to allow defining attributes for
   paths. These attributes can be defined by adding a `.gitattributes`
   file to the repository, which contains a set of file patterns and
   the attributes that should be set for paths matching this pattern.

   When parsing gitattributes, multiple integer overflows can occur
   when there is a huge number of path patterns, a huge number of
   attributes for a single pattern, or when the declared attribute
   names are huge.

   These overflows can be triggered via a crafted `.gitattributes` file
   that may be part of the commit history. Git silently splits lines
   longer than 2KB when parsing gitattributes from a file, but not when
   parsing them from the index. Consequentially, the failure mode
   depends on whether the file exists in the working tree, the index or
   both.

   This integer overflow can result in arbitrary heap reads and writes,
   which may result in remote code execution.

Git for Windows 2.39.0(2)

Changes since Git for Windows v2.39.0 (December 12th 2022)

New Features

• Comes with PCRE2 v10.42.
• Comes with Git Credential Manager v2.0.886.
• Comes with MinTTY v3.6.3.
• Comes with cURL v7.87.0.

Bug Fixes

• The installer is expected to stop GPG agents automatically, but there was a bug that prevented that from working, which has been fixed.
• A regression that caused no_proxy to be ignored was fixed by upgrading libcurl.
• The Git Credential Manager version shipped with Git for Windows v2.39.0 could not always find its UI helper which was fixed by upgrading to a fixed version.
• A bug in MinTTY caused it to throw a Critical Error when the printer spool service was not started, which was fixed by upgrading MinTTY.

Filename	SHA-256
Git-2.39.0.2-64-bit.exe	8cf0ee3efaabe8a9b9b6b6889ae0ed369d9f1c85696ad637e715959921ed71c3
Git-2.39.0.2-32-bit.exe	eb5a8bd17995117a3bcdb0b9fcec74141ae6b1a74fe960fd0c9192a2b1d9c903
PortableGit-2.39.0.2-64-bit.7z.exe	0a58c7b062a29bc44fb573c9afc5323011d01237dd94c74e6c833929cfe25436
PortableGit-2.39.0.2-32-bit.7z.exe	042de3e9f87e529ee53ed31385bc76b39a9794c32c18ea7c62e3e6445dd8484d
MinGit-2.39.0.2-64-bit.zip	771e7bef1b672e3f63b18b8c4a62d626c8f47c41390a745f313758c0b6ae4d63
MinGit-2.39.0.2-32-bit.zip	a5ac14121bb0fe879355f58db15aae41205046b7cd1832df40d1e784aa8e1c70
MinGit-2.39.0.2-busybox-64-bit.zip	4337be32536f6840da4ef67ef93996a3808b774c4f61e3a2a585f5d968d1b1d3
MinGit-2.39.0.2-busybox-32-bit.zip	f68c4c5dce5cda8743d8a134174d1cbf0e0af725791bbc3c4062f3fdf93094b2
Git-2.39.0.2-64-bit.tar.bz2	1e81e8b0026cfa71050f81abf10669733a7b66b44c68e5a9448ace15cf521030
Git-2.39.0.2-32-bit.tar.bz2	bf5e3281378e8ed23f6bff3f3e1ef7d84932050c2f590f75e4f19d419b7387ec

Git for Windows 2.39.0

Changes since Git for Windows v2.38.1 (October 18th 2022)

New Features

• Comes with Git v2.39.0.
• Comes with OpenSSL v1.1.1s.
• Comes with cURL v7.86.0.
• The Portable Git edition (which comes as a self-extracting 7-Zip archive) now uses the latest 7-Zip version to self-extract.
• Comes with OpenSSH v9.1p1.
• It is now possible to generate and use SSH keys protected by security keys (AKA FIDO devices) via Windows Hello, e.g. via ssh-keygen.exe -t ecdsa-sk.
• Portable Git no longer configures color.diff, color.status and color.branch individually, but configures color.ui instead, which makes it easier to override the default.
• Comes with GNU TLS v3.7.8.
• Comes with Git Credential Manager Core v2.0.877.
• Comes with MinTTY v3.6.2.
• Comes with Bash v5.2 patchlevel 12.
• Comes with Git LFS v3.3.0.
• Comes with PCRE2 v10.41.

Bug Fixes

• The Git executables (e.g. git.exe itself) used to have incomplete version information recorded in their resources, which has been fixed.
• A regression introduced in Git for Windows v2.38.0 that prevented git.exe from running in Windows Nano Server containers was fixed.

Filename	SHA-256
Git-2.39.0-64-bit.exe	2eaba567e17784654be77ba997329742d87845c6f15e33c9620f9a331c69a976
Git-2.39.0-32-bit.exe	5b01ddb342a07e74e723fe93bc84c275a19236e853c406b4496478e64a7f8add
PortableGit-2.39.0-64-bit.7z.exe	8ca31e8474048b48b813ebdf95f288d58f253717d071d11785cc23f37dc6a396
PortableGit-2.39.0-32-bit.7z.exe	b8332fc12bcb1343d57c785d7ec140e2fd89f9d7f70309a00e79f9822c2cc855
MinGit-2.39.0-64-bit.zip	ae6863d7b7641ecf73f61edadbc7d1ff8259d08eccb4b9f006bb443d90910c25
MinGit-2.39.0-32-bit.zip	ad20467cf6a4c215b2c71f9bee192fb8ea1696fa3dda8e35e89544cdabdc1c7a
MinGit-2.39.0-busybox-64-bit.zip	a5d177bceeddfecc97c2340f0c8bc97d55ba113c4cd5b6b7d58e513dccb3d74f
MinGit-2.39.0-busybox-32-bit.zip	cb8371cbba56562f7af1d54281afb24bfa23395a57a0868398f644a79c2fea2a
Git-2.39.0-64-bit.tar.bz2	ed78c21d89281d91fb1282043c3b618350e8ff721947ad01678356126b0447f3
Git-2.39.0-32-bit.tar.bz2	09126077d63b3e3e19c90599f86c037eb57edddf255e75acc31720428d03d78b

Git for Windows 2.39.0-rc2

Changes since Git for Windows v2.38.1 (October 18th 2022)

New Features

• Comes with Git v2.39.0-rc2.
• Comes with OpenSSL v1.1.1s.
• Comes with cURL v7.86.0.
• The Portable Git edition (which comes as a self-extracting 7-Zip archive) now uses the latest 7-Zip version to self-extract.
• Comes with OpenSSH v9.1p1.
• It is now possible to generate and use SSH keys protected by security keys (AKA FIDO devices) via Windows Hello, e.g. via ssh-keygen.exe -t ecdsa-sk.
• Portable Git no longer configures color.diff, color.status and color.branch individually, but configures color.ui instead, which makes it easier to override the default.
• Comes with GNU TLS v3.7.8.
• Comes with Git Credential Manager Core v2.0.877.
• Comes with MinTTY v3.6.2.
• Comes with Bash v5.2 patchlevel 12.
• Comes with Git LFS v3.3.0.

Bug Fixes

• The Git executables (e.g. git.exe itself) used to have incomplete version information recorded in their resources, which has been fixed.
• A regression introduced in Git for Windows v2.38.0 that prevented git.exe from running in Windows Nano Server containers was fixed.

Filename	SHA-256
Git-2.39.0-rc2-64-bit.exe	00845a71bc814d2ace4a83f25ee042e04e1e742813460ee64b99028c801aaac2
Git-2.39.0-rc2-32-bit.exe	214c9e69e1ca6b0a299b4028f0053a735f07cdc27504a187d720048de33f5715
PortableGit-2.39.0-rc2-64-bit.7z.exe	62557cbfb57e40da55dc96596d985dc409ee8f665fa265856982b92320773d27
PortableGit-2.39.0-rc2-32-bit.7z.exe	ba968b714dab78d63ad0fa66c1ab38980d46a591c2752e987f47523c136de90a
MinGit-2.39.0-rc2-64-bit.zip	c05bd4694da21047083b0858a09453f6cf1c871933ec2c303bf352eb0b0391fb
MinGit-2.39.0-rc2-32-bit.zip	6d55bf2e405f7005477af028d670ee5fe79e22d5e1b7ab282ef5c030b3c9625c
MinGit-2.39.0-rc2-busybox-64-bit.zip	c7617169686d04f6622a545019b000f318151a774e769e900595a1db21b4ba6d
MinGit-2.39.0-rc2-busybox-32-bit.zip	9b1593b76b759f41631e43f775ac40ce902eba24247cadd02a0fdd1a265e063a
Git-2.39.0-rc2-64-bit.tar.bz2	cf8d13e34810f6e90403098783c47c8c3213a3a6cbc35578d5e63f731b29e1a6
Git-2.39.0-rc2-32-bit.tar.bz2	2e1e4100e80c62bcf7086140ea30e07f107328e2378545302620c27896f87be8

Git for Windows 2.39.0-rc1

Changes since Git for Windows v2.38.1 (October 18th 2022)

New Features

• Comes with Git v2.39.0-rc1.
• Comes with OpenSSL v1.1.1s.
• Comes with cURL v7.86.0.
• The Portable Git edition (which comes as a self-extracting 7-Zip archive) now uses the latest 7-Zip version to self-extract.
• Comes with OpenSSH v9.1p1.
• It is now possible to generate and use SSH keys protected by security keys (AKA FIDO devices) via Windows Hello, e.g. via ssh-keygen.exe -t ecdsa-sk.
• Portable Git no longer configures color.diff, color.status and color.branch individually, but configures color.ui instead, which makes it easier to override the default.
• Comes with GNU TLS v3.7.8.
• Comes with Git Credential Manager Core v2.0.877.
• Comes with MinTTY v3.6.2.
• Comes with Bash v5.2 patchlevel 12.

Bug Fixes

• The Git executables (e.g. git.exe itself) used to have incomplete version information recorded in their resources, which has been fixed.
• A regression introduced in Git for Windows v2.38.0 that prevented git.exe from running in Windows Nano Server containers was fixed.

Filename	SHA-256
Git-2.39.0-rc1-64-bit.exe	ea2412da9d24706a9f600d34136536e281b1ec5d67ab04cb2edfeb16eb39fc33
Git-2.39.0-rc1-32-bit.exe	aa4fc74ee343fb8e172a69ecb28b215cba84e93c70d1d25b15c70a24966bfb03
PortableGit-2.39.0-rc1-64-bit.7z.exe	dd568bd0fab26f8660a89b125b91c0f681b2b7c235681973bbd886498a62070c
PortableGit-2.39.0-rc1-32-bit.7z.exe	0c29213329d702efaeda39bccadbda7edf7eded113a68e2b0b4c7242ac6432ae
MinGit-2.39.0-rc1-64-bit.zip	d0bf3d86da0571cfc99b39d9b06c1d58136870e0dde0235db6b3f22685633072
MinGit-2.39.0-rc1-32-bit.zip	43f658e613de064c38619dcffa51d2fa4e55a4035f6b46054b8342613767a2de
MinGit-2.39.0-rc1-busybox-64-bit.zip	5c4e74bc0f6d731e9fbc8693c4bfe25ea6b172d38adf70ff0c2d1015c7288f46
MinGit-2.39.0-rc1-busybox-32-bit.zip	eaaf0444b95ab48f442e7a7375dfac0e97c1547afb348a627c70795ec5edb5e2
Git-2.39.0-rc1-64-bit.tar.bz2	5db8ec7346080deceed5ee7f7e6c8025b4621954e0772873f1c8c528508979dc
Git-2.39.0-rc1-32-bit.tar.bz2	db2b57ab50f4e4a5e225842f8ff31bc849ab0c5961fbdd177b3e92c45b6ba859

Git for Windows 2.39.0-rc0

Changes since Git for Windows v2.38.1 (October 18th 2022)

• Comes with OpenSSL v1.1.1q.

New Features

• Comes with Git v2.39.0-rc0.
• Comes with OpenSSL v1.1.1s.
• Comes with cURL v7.86.0.
• The Portable Git edition (which comes as a self-extracting 7-Zip archive) now uses the latest 7-Zip version to self-extract.
• Comes with OpenSSH v9.1p1.
• It is now possible to generate and use SSH keys protected by security keys (AKA FIDO devices) via Windows Hello, e.g. via ssh-keygen.exe -t ecdsa-sk.
• Comes with Bash v5.2 patchlevel 009 .
• Portable Git no longer configures color.diff, color.status and color.branch individually, but configures color.ui instead, which makes it easier to override the default.
• Comes with GNU TLS v3.7.8.
• Comes with Git Credential Manager Core v2.0.877.

Bug Fixes

• The Git executables (e.g. git.exe itself) used to have incomplete version information recorded in their resources, which has been fixed.
• A regression introduced in Git for Windows v2.38.0 that prevented git.exe from running in Windows Nano Server containers was fixed.

Filename	SHA-256
Git-2.39.0-rc0-64-bit.exe	74ba237e120c4528102001551f2b2c08a9643a6cad8d7a397b134e4dde5498ef
Git-2.39.0-rc0-32-bit.exe	0c14e81e0746a151ca8937c3736160720b4cfecf9bc826f681de7f275978ab51
PortableGit-2.39.0-rc0-64-bit.7z.exe	02e73e5f584df658a709f373b0e0b8dc7ff72a754052bd76cd0af67fa23a9701
PortableGit-2.39.0-rc0-32-bit.7z.exe	2c6acc55ea0df14be2b1695445ec6ac9061eb6e5a0f50ee8d9a1054899e522c2
MinGit-2.39.0-rc0-64-bit.zip	638acc223365fc761655926b2cd86d9f4e2b6618a7ddee183a31c26dd3a63714
MinGit-2.39.0-rc0-32-bit.zip	bc3c16ba093821ffb254a6c2eb44a9f84de163543f657e03ca1b797a826ab80c
MinGit-2.39.0-rc0-busybox-64-bit.zip	f898d769d717c85f380f65687b10734aa5cfb28b636805b7bf434b5c24dbc593
MinGit-2.39.0-rc0-busybox-32-bit.zip	bd79b74dac8b69a8eba4c5324b5190dd85c71b74ffb8e2ca20358d94e244ec00
Git-2.39.0-rc0-64-bit.tar.bz2	48f2855ec77fb608f3831b1aaab725ca599e42a8fb27c6aa6c872c4d3f2f9efd
Git-2.39.0-rc0-32-bit.tar.bz2	036afe5dda8cb98e70bbcbce92570dfe0bc6d6f82f2fb7e0129faf17b62eeb4f

MinGit v2.35.5.windows.1

v2.35.5.windows.1

Git for Windows 2.38.1

Changes since Git for Windows v2.38.0 (October 3rd 2022)

This is a security bug fix release coordinated with Git v2.38.1, addressing CVE-2022-39260 and CVE-2022-39253.

New Features

• Comes with Git v2.38.1.

Filename	SHA-256
Git-2.38.1-64-bit.exe	f3fe05e65cd7e9a9126784d4ad57fdf979d30d5987fe849af4348dbe3e284df6
Git-2.38.1-32-bit.exe	2b607570ef03a51a3fed89c30dd461d73660cbf7686e41deaaa5ba2e719a9e7e
PortableGit-2.38.1-64-bit.7z.exe	cdcdb268aaed1dd2ac33d1dfdaf105369e3d7bd8d84d641d26d30b34e706b843
PortableGit-2.38.1-32-bit.7z.exe	d434ad45bd9060a99c1d58e9b2b09597c52035a6a3ebeb6a0fdc694092b298b5
MinGit-2.38.1-64-bit.zip	77b14610d92e717ac025e5409e2e713553435bfad224753baf6858ebd0f7d96d
MinGit-2.38.1-32-bit.zip	cbd7c8cce55f4c1d9d858f7137f46eff44018fa9b0e646200b80ef9d1975288f
MinGit-2.38.1-busybox-64-bit.zip	8a0c3c3a5c63f182ef52e6736187998aa4751e09e828750dfe4d4854a27172fc
MinGit-2.38.1-busybox-32-bit.zip	9fbb8530e103c736afadc9c0df3c69a2cd7719e8c9ab1d1785c85f1519778835
Git-2.38.1-64-bit.tar.bz2	09246e1bbe9f7e5d2874e25ce0d05d555a059a709883b5afecf3e3aeb9b0ac2b
Git-2.38.1-32-bit.tar.bz2	43651cc1d0c723acce2d7e018c0e86a7d57b1aa2395516d521787d2a539fb6d2

Git for Windows 2.38.0

Changes since Git for Windows v2.37.3 (August 30th 2022)

New Features

• Comes with Git v2.38.0.
• Comes with cURL v7.85.0.
• Comes with MSYS2 runtime (Git for Windows flavor) based on Cygwin 3.3.6.
• Comes with BusyBox v1.34.0.19688.985b51cf7.
• The scalar command is now included. Scalar is a helper to automatically configure your (large) Git repositories to take advantage of the latest and greatest features. Note: If you work with repositories hosted on Azure Repos, use Microsoft's fork of Git for the best user experience.

Filename	SHA-256
Git-2.38.0-64-bit.exe	49fa8d1f151e83b89c84e0cb9e400ee0d543d238960f506e487b5a39889fa2c8
Git-2.38.0-32-bit.exe	d1f4c6f9194743566b7e02ff4e437144ff102c16a6e3d3238500fb18cefa6a07
PortableGit-2.38.0-64-bit.7z.exe	68f6eb736f20f51689a77584f6fdb12340754c90ae1fca83e2ca1cd11e3d3a73
PortableGit-2.38.0-32-bit.7z.exe	8dbea9a129bf072c1650e4f914a8b54f4e6faccbd5c6942301835fcc5ef931c6
MinGit-2.38.0-64-bit.zip	52c9b2a4b10a0a25b1be9466f60a5d5ca5330d5eb8c1661a8fac4bf2677a0e46
MinGit-2.38.0-32-bit.zip	f80ee8a4f2074ff9dc678487155a0571599cda7dfe4bbf54534f4ead23577b6f
MinGit-2.38.0-busybox-64-bit.zip	36cff40e8a27b81e13b148c8ef38351f1b234edc18ab09d3a46319ddf317200e
MinGit-2.38.0-busybox-32-bit.zip	f310c8fb14942d5526d9a984e5eac8e70e08d8411fd7850d4dd9371f5e9c114d
Git-2.38.0-64-bit.tar.bz2	e8e8420d4ce68193f678b5655d96fef79b376f411a1779f322e2165250e73061
Git-2.38.0-32-bit.tar.bz2	de1d561bafa352eecc8b7b6ddf4ed1ee0cf8c957382574b38282760f0766ff40

Git for Windows 2.38.0-rc2

Changes since Git for Windows v2.37.3 (August 30th 2022)

New Features

• Comes with Git v2.38.0-rc2.
• Comes with cURL v7.85.0.
• Comes with MSYS2 runtime (Git for Windows flavor) based on Cygwin 3.3.6.
• Comes with BusyBox v1.34.0.19688.985b51cf7.
• The scalar command is now included. Scalar is a helper to automatically configure your (large) Git repositories to take advantage of the latest and greatest features. Note: If you work with repositories hosted on Azure Repos, use Microsoft's fork of Git for the best user experience.

Filename	SHA-256
Git-2.38.0-rc2-64-bit.exe	0119ba61071b45fb6e6c647473192c1513db568e43310cba8150e842cc526ef9
Git-2.38.0-rc2-32-bit.exe	cd5735be6047512cd3d52fcc7d152930d28c6e1d89245273d4cf1594e03c2211
PortableGit-2.38.0-rc2-64-bit.7z.exe	5abe7fbcf30d028f9cfbc0bb9bdf418f04afe06f2131cca5bc5ca5b8823d8c5b
PortableGit-2.38.0-rc2-32-bit.7z.exe	718b21123565d4bd0676ffd8bf74a5ef736b12e489c600d37285fada29b30e0e
MinGit-2.38.0-rc2-64-bit.zip	c9005c8c48c30d93aaa2d401d2902bdce5cdebd1bb21f3207dac6d3cf5fff913
MinGit-2.38.0-rc2-32-bit.zip	ace20517a2cd2e7940e79438c439010cb43ba95bd0170facd8bd72148e20f1ff
MinGit-2.38.0-rc2-busybox-64-bit.zip	64e5cac970b6b08ce10237fffce1a666fae46ab87896032ee996c6f3b6c94710
MinGit-2.38.0-rc2-busybox-32-bit.zip	659c0d517dc312e42ccd3941c59e61989003173706ba13fbf9d11a02537f9a4d
Git-2.38.0-rc2-64-bit.tar.bz2	f12622455408dc4febf8b7c8666ac7a30c0794697e13f71bd6c3df227aa1e22c
Git-2.38.0-rc2-32-bit.tar.bz2	86388c90c6eaf46ea420d5969ef2d3c08b4bed3629136904daf0a129ab91cbf9