Download Git 2.19.1 / 2.18.1 / 2.17.2 / 2.16.5 / 2.15.3 / 2.14.5

The developers behind Git have released versions 2.19.1, 2.18.1, 2.17.2, 2.16.5, 2.15.3, and 2.14.5 of their software. With Git, software and project developers, among others, can perform management and version control over data and source code. The program can be seen as a competitor to Subversion or Mercurial. It has, among other things, complete branching and mergingfunctions, and is released under the gpl version 2. For an overview of comparisons between Git and other version control systems, see this page† The lists of changes look like this:

Git v2.19.1 and v2.18.1 Release Notes

This release merges up the fixes that appear in v2.14.5 and in v2.17.2 to address the recently reported CVE-2018-17456; see the release notes for those versions for details.

Git v2.17.2 Release Notes

This release merges up the fixes that appear in v2.14.5 to address the recently reported CVE-2018-17456; see the release notes for that version for details.

In addition, this release also teaches “fsck” and the server side logic to reject pushes to repositories that attempt to create such a problematic “.gitmodules” file as tracked contents, to help hosting sites protect their customers by preventing malicious contents from spreading.

Git v2.16.5 and v2.15.3 Release Notes

This release merges up the fixes that appear in v2.14.5 to address the recently reported CVE-2018-17456; see the release notes for that version for details.

Git v2.14.5 Release Notes

This release is to address the recently reported CVE-2018-17456.

Submodules’ “URL”s come from the untrusted .gitmodules file, but we blindly gave it to “git clone” to clone submodules when “git clone –recurse-submodules” was used to clone a project that has such a submodule. The code has been hardened to reject such malformed URLs (eg one that begins with a dash).

Credit for finding and fixing this vulnerability goes to joernchen and Jeff King, respectively.