The latest maintenance release Git v2.3.7 is now available at the usual places. Hopefully this will be the last v2.3.x update until the master front is tagged as v2.4 final. The tarballs are found at: https://www.kernel.org/pub/software/scm/git/ The following public repositories all have a copy of the 'v2.3.7' tag and the 'maint' branch that the tag points at: url = https://kernel.googlesource.com/pub/scm/git/git url = git://repo.or.cz/alt-git.git url = https://code.google.com/p/git-core/ url = git://git.sourceforge.jp/gitroot/git-core/git.git url = git://git-core.git.sourceforge.net/gitroot/git-core/git-core url = https://github.com/gitster/git ---------------------------------------------------------------- Git v2.3.7 Release Notes ======================== Fixes since v2.3.6 ------------------ * An earlier update to the parser that disects a URL broke an address, followed by a colon, followed by an empty string (instead of the port number), e.g. ssh://example.com:/path/to/repo. * The completion script (in contrib/) contaminated global namespace and clobbered on a shell variable $x. * The "git push --signed" protocol extension did not limit what the "nonce" that is a server-chosen string can contain or how long it can be, which was unnecessarily lax. Limit both the length and the alphabet to a reasonably small space that can still have enough entropy. Also contains typofixes, documentation updates and trivial code clean-ups. ---------------------------------------------------------------- Changes since v2.3.6 are as follows: Junio C Hamano (2): push --signed: tighten what the receiving end can ask to sign Git 2.3.7 Márcio Almada (1): completion: fix global bash variable leak on __gitcompappend Torsten Bögershausen (1): connect.c: ignore extra colon after hostname -- To unsubscribe from this list: send the line "unsubscribe git" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html