[ANNOUNCEMENT] Security update: Git v2.35.3-1

Adam Dinwoodie adam@dinwoodie.org
Thu Apr 14 13:01:21 GMT 2022


Version 2.35.3-1 of Git has been uploaded and should be coming soon to a
mirror near you.

This is an update to the latest upstream release; it contains two fixes,
one improving the security of yesterday's security fix for
CVE-2022-24765, and one improving the usability of that fix:

> * The code that was meant to parse the new `safe.directory`
>   configuration variable was not checking what configuration
>   variable was being fed to it, which has been corrected.
>
> * '*' can be used as the value for the `safe.directory` variable to
>   signal that the user considers that any directory is safe.

This update includes the following patches:

- git
- git-cvs
- git-debuginfo
- git-email
- git-gui
- gitk
- git-p4
- git-svn

As ever, the full upstream changelogs are available with the source package, or
at:

https://git.kernel.org/cgit/git/git.git/tree/Documentation/RelNotes
https://github.com/git/git/tree/master/Documentation/RelNotes

Enjoy!


More information about the Cygwin mailing list