[ANNOUNCE] Git for Windows 2.40.1

[Johannes Schindelin]

Dear Git users,

I hereby announce that Git for Windows 2.40.1 is available from:

https://gitforwindows.org/

Changes since Git for Windows v2.40.0 (March 14th 2023)

This is a security release, addressing CVE-2023-29012, CVE-2023-29011,
CVE-2023-29007, CVE-2023-25815 and CVE-2023-25652.

As announced previously, Git for Windows will drop support for Windows
7 and for Windows 8 in one of the next versions, following Cygwin's and
MSYS2's lead (Git for Windows relies on MSYS2 for components such as
Bash and Perl).

Also following the footsteps of the MSYS2 and Cygwin projects on which
Git for Windows depends, the 32-bit variant of Git for Windows is
nearing its end of support.

New Features

* Comes with Git v2.40.1.

Bug Fixes

* Addresses CVE-2023-29012, a vulnerability where starting Git CMD
would execute doskey.exe in the current directory, if it exists.
* Addresses CVE-2023-29011, a vulnerability where the SOCKS5 proxy
called connect.exe is susceptible to picking up an untrusted
configuration on multi-user machines.
* Addresses CVE-2023-29007, a vulnerability where git submodule
deinit can inadvertently introduce malicious changes into the Git
config file.
* Addresses CVE-2023-25815, a vulnerability where Git can
unexpectedly show crafted "localized" messages written by another
user on a multi-user machine.
* Addresses CVE-2023-25652, a vulnerability where git apply --reject
could follow symbolic links to write files outside the worktree.

Git-2.40.1-64-bit.exe | d2f0fbf9d84622b2aa4aed401daf6dedb8ac89bb388af02078ba375496a873dc
Git-2.40.1-32-bit.exe | 3ee2289a4f6e9917f702bd032a67874c11aa05bf2d28d967986e40d4f7f50636
PortableGit-2.40.1-64-bit.7z.exe | 9e1d819aef3284420adf6d923b0d4865254bd403641d915975e49ddea1e7cdf9
PortableGit-2.40.1-32-bit.7z.exe | e1360e94cb292862fb023018578a1029022a09278b160f7264c6dc444f65c9ca
MinGit-2.40.1-64-bit.zip | 36498716572394918625476ca207df3d5f8b535a669e9aad7a99919d0179848c
MinGit-2.40.1-32-bit.zip | 8bfc48e5211cc209768297e0b71c253b2d8393875d7b3daef8c54909634daa16
MinGit-2.40.1-busybox-64-bit.zip | 8c829d6f3ae0d48e5939b7ddccbaea44b8ef2a38f9e28c3afa691e0451432b14
MinGit-2.40.1-busybox-32-bit.zip | e31c73c0b7d3546fba54e9416bf4ce850ea7e528eb6c8b059fdd941ad78749c7
Git-2.40.1-64-bit.tar.bz2 | 249b3f31b14b802c26e64f082131fe3346af7de204a897438a0027b67fdcd0b7
Git-2.40.1-32-bit.tar.bz2 | be7c1b51bc30187a28d77e5f71e5bbcd768b2d0021ba11ad26178f08920533fb

Ciao,
Johannes

[Kevin GOSSENT]

Hi,

From my perspective there is a bug in the installer.

For each previous versions of the exe installers, it could find and propose updates. This one does not find the last version installed and only propose normal install and warns (as it should) when selecting the directory in which the previous version is installed.

I'm right now on 2.40.0 64bit and 2.40.1 64 bit installer can't find it...

[Dan G]

Hi,
I've recently installed the 64 bit Window's version and can't do "Git Bash Here",
It show the next message:

"Error: Could not fork child process: Resource temporarily unavailable (-1).
DLL rebasing may be required; see 'rebaseall / rebase --help'."

From the post-install.bat:

X:\SH\PortableGit-2.40.1-64-bit.7z>post-install.bat
"running post-install"
      2 [main] bash (2300) F:\SH\PortableGit-2.40.1-64-bit.7z\usr\bin\bash.exe: *** fatal error - cygheap base mismatch detected - 0x13514B0/0x13F14B0.
This problem is probably due to using incompatible versions of the cygwin DLL.
Search for cygwin1.dll using the Windows Start->Find/Search facility
and delete all but the most recent version.  The most recent version *should*
reside in x:\cygwin\bin, where 'x' is the drive on which you have
installed the cygwin distribution.  Rebooting is also suggested if you
are unable to find another cygwin DLL.
      2 [main] bash 1105 dofork: child -1 - forked process 2300 died unexpectedly, retry 0, exit code 0xC0000142, errno 11
usr/bin/bash: fork: retry: Resource temporarily unavailable
      3 [main] bash (9336) F:\SH\PortableGit-2.40.1-64-bit.7z\usr\bin\bash.exe: *** fatal error - cygheap base mismatch detected - 0x13514B0/0x13214B0.
This problem is probably due to using incompatible versions of the cygwin DLL.
Search for cygwin1.dll using the Windows Start->Find/Search facility
and delete all but the most recent version.  The most recent version *should*
reside in x:\cygwin\bin, where 'x' is the drive on which you have
installed the cygwin distribution.  Rebooting is also suggested if you
are unable to find another cygwin DLL.
1219387 [main] bash 1105 dofork: child -1 - forked process 9336 died unexpectedly, retry 0, exit code 0xC0000142, errno 11
usr/bin/bash: fork: retry: Resource temporarily unavailable
      5 [main] bash (11652) F:\SH\PortableGit-2.40.1-64-bit.7z\usr\bin\bash.exe: *** fatal error - cygheap base mismatch detected - 0x13514B0/0x13914B0.
This problem is probably due to using incompatible versions of the cygwin DLL.
Search for cygwin1.dll using the Windows Start->Find/Search facility
and delete all but the most recent version.  The most recent version *should*
reside in x:\cygwin\bin, where 'x' is the drive on which you have
installed the cygwin distribution.  Rebooting is also suggested if you
are unable to find another cygwin DLL.
3461334 [main] bash 1105 dofork: child -1 - forked process 11652 died unexpectedly, retry 0, exit code 0xC0000142, errno 11
usr/bin/bash: fork: retry: Resource temporarily unavailable
      2 [main] bash (936) F:\SH\PortableGit-2.40.1-64-bit.7z\usr\bin\bash.exe: *** fatal error - cygheap base mismatch detected - 0x13514B0/0x12C14B0.
This problem is probably due to using incompatible versions of the cygwin DLL.
Search for cygwin1.dll using the Windows Start->Find/Search facility
and delete all but the most recent version.  The most recent version *should*
reside in x:\cygwin\bin, where 'x' is the drive on which you have
installed the cygwin distribution.  Rebooting is also suggested if you
are unable to find another cygwin DLL.
7669599 [main] bash 1105 dofork: child -1 - forked process 936 died unexpectedly, retry 0, exit code 0xC0000142, errno 11
usr/bin/bash: fork: retry: Resource temporarily unavailable
      2 [main] bash (10408) F:\SH\PortableGit-2.40.1-64-bit.7z\usr\bin\bash.exe: *** fatal error - cygheap base mismatch detected - 0x13514B0/0x12714B0.
This problem is probably due to using incompatible versions of the cygwin DLL.
Search for cygwin1.dll using the Windows Start->Find/Search facility
and delete all but the most recent version.  The most recent version *should*
reside in x:\cygwin\bin, where 'x' is the drive on which you have
installed the cygwin distribution.  Rebooting is also suggested if you
are unable to find another cygwin DLL.
15906617 [main] bash 1105 dofork: child -1 - forked process 10408 died unexpectedly, retry 0, exit code 0xC0000142, errno 11
usr/bin/bash: fork: Resource temporarily unavailable
No se ha encontrado el archivo por lotes.

[Dan G]

Hi,

I've recently installed the 64 bit version for windows and can't do "Git Bash Here":

It put the message:

"Error: Could not fork child process: Resource temporarily unavailable (-1).

DLL rebasing may be required; see 'rebaseall / rebase --help'."

The next report is returned from post-install.bat: