{"thread":{"id":"59104","subject":"[ANNOUNCE] Git for Windows 2.39.1","startedAt":"2023-01-17T18:48:05Z","lastAt":"2023-01-17T18:48:05Z","messageCount":1,"participants":["Johannes Schindelin"],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"470524","messageId":"20230117180850.3664-1-johannes.schindelin@gmx.de","threadId":"59104","inReplyTo":null,"subject":"[ANNOUNCE] Git for Windows 2.39.1","fromName":"Johannes Schindelin","fromEmail":"johannes.schindelin@gmx.de","sentAt":"2023-01-17T18:08:50Z","receivedAt":"2023-01-17T18:48:05Z","isPatch":false,"sender":{"key":"johannes.schindelin@gmx.de","avatar":"https://avatars.githubusercontent.com/u/127790?v=4"},"body":"Dear Git users,\n\nI hereby announce that Git for Windows 2.39.1 is available from:\n\n    https://gitforwindows.org/\n\nChanges since Git for Windows v2.39.0(2) (December 21st 2022)\n\nThis is a security release, addressing CVE-2022-41903, CVE-2022-23521\nand CVE-2022-41953.\n\nNew Features\n\n  * Comes with Git v2.39.1.\n\nBug Fixes\n\n  * Addresses CVE-2022-23521, a critical vulnerability in the\n    .gitattributes parsing that potentially allows malicious code to be\n    executed while cloning.\n  * Addresses CVE-2022-41953, a vulnerability that makes Git GUI's\n    Clone function susceptible to Remote Code Execution attacks.\n  * Addresses CVE-2022-41903, a vulnerability that may allow heap\n    overflows and code to be executed inadvertently during a git\n    archive invocation.\n  * A regression introduced in Git for Windows v2.39.0(2) that\n    prevented cloning from Bitbucket was fixed.\n\nGit-2.39.1-64-bit.exe | 82d088233144054d14d8cc890870544f1ac6ac73aebade87c4d96c97b55d8508\nGit-2.39.1-32-bit.exe | b9ac2863b42eb60ee6cbb0663378bb119cb976a52985d4bbe92ad00b073ffed2\nPortableGit-2.39.1-64-bit.7z.exe | b898306a44084b5fa13b9a52e06408d97234389d07ae41d9409bdf58cad3d227\nPortableGit-2.39.1-32-bit.7z.exe | 2cb1a83f30f0c2948c97d3dc683c8b058c808f89b51bfb813de67253d17caa15\nMinGit-2.39.1-64-bit.zip | 000649846ec6e28e8f76d4a0d02f02b3dd1ba19914385f7dead1c5cde25b3bad\nMinGit-2.39.1-32-bit.zip | e36dc71d97359f584d25efbdabb4122fb71514bcba5a99df1b82a83cee9472e3\nMinGit-2.39.1-busybox-64-bit.zip | c2b54edf2f5b3c7a7bb65640d49f8d7a953145b989125c8749e673d03e2a80f1\nMinGit-2.39.1-busybox-32-bit.zip | 4a28a9bd4e49d260ae3c35bf9a2cdb91f12d4a4cf081f21b3df278e76f401262\nGit-2.39.1-64-bit.tar.bz2 | 2a33c6fef5ed9d2794013fe965066b80c24b556168aca28c0252c1e11859f4ad\nGit-2.39.1-32-bit.tar.bz2 | fdbbd5bcbe00f8981df11cdff87f74440b1a64f40898740559f68e4565555a44\n\nCiao,\nJohannes\n"}]}