{"thread":{"id":"66157","subject":"[ANNOUNCE] Git for Windows 2.55.0(4)","startedAt":"2026-08-11T17:58:38Z","lastAt":"2026-08-11T17:58:38Z","messageCount":1,"participants":["Johannes Schindelin"],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"550318","messageId":"1MPog5-1wWyPX1fBD-00Ju4C@mail.gmx.net","threadId":"66157","inReplyTo":null,"subject":"[ANNOUNCE] Git for Windows 2.55.0(4)","fromName":"Johannes Schindelin","fromEmail":"johannes.schindelin@gmx.de","sentAt":"2026-08-11T17:58:35Z","receivedAt":"2026-08-11T17:58:38Z","isPatch":false,"body":"Dear Git users,\n\nI hereby announce that Git for Windows 2.55.0(4) is available from:\n\n    https://gitforwindows.org/\n\nChanges since Git for Windows v2.55.0(3) (July 14th 2026):\n\nFollowing the MSYS2 project, on which Git for Windows is based, Windows\n8.1 support will be dropped after Git for Windows v2.55.\n\nThis is a security fix release, addressing CVE-2026-62960.\n\n  * CVE-2026-62960, Git for Windows: Attacker-controlled servers may\n    advertise bundle URIs that point to network shares, causing Windows\n    to transparently perform NTLM authentication and disclose the\n    user's NTLMv2 hash. Since NTLM hashing is weak, the captured hash\n    can potentially be brute-forced to recover the user's credentials.\n    This is addressed by limiting the bundle URIs that git clone\n    respects by the same protocol.<name>.allow rules as usual, which\n    excludes file:// URIs by default.\n\nGit-2.55.0.4-64-bit.exe | 0cbc0b34a74b3aff3ace0910328549155a770e228331b19cb1498218a120e7ff\nGit-2.55.0.4-arm64.exe | 8d358f4d53a5a475570edca3124dc0d4f1a020321594984f58e6b04f86f50ec4\nPortableGit-2.55.0.4-64-bit.7z.exe | 016e84230a3767f0c6b3788e79ba0c58a17377086801719d46700fca4f7b36b5\nPortableGit-2.55.0.4-arm64.7z.exe | d69d0c6a3c5445553565ef74f1d9e22a9869f57c246111db347dd96c252b4da5\nMinGit-2.55.0.4-64-bit.zip | 4e03f94c2ffbf70be337e005cee02661c732dbfc81031a078bda9299b9a7d644\nMinGit-2.55.0.4-arm64.zip | 033eb6b927d804558ae479a6ae6c6ed86da42cabc0d424844a3e108c780a58cc\nMinGit-2.55.0.4-32-bit.zip | 01bd8fc4cf00df3e278e09a036a003c698b512b68508a1163404ef138ed4ef93\nMinGit-2.55.0.4-busybox-64-bit.zip | 255a8d6f43e330817ae1eb2599e153835383cdfb17759c5251318242b03ad3db\nMinGit-2.55.0.4-busybox-32-bit.zip | 308e0a24c77fe72d466d2db1e23aea52ee2e4b6dc92f18db04020a9113171ea0\nGit-2.55.0.4-64-bit.tar.bz2 | 5c22d52d59bc5d46a47ef5bd3d071723ee014eed219fb6337444acd0dcb8b910\nGit-2.55.0.4-arm64.tar.bz2 | 7cc28b4431c9448c310d0093fbba5646517cd702690a9b965014d7df85319ad9\n\nCiao,\nJohannes\n"}]}