Changes since Git for Windows v2.53.0(3) (April 14th 2026)

This is a security fix release, addressing CVE-2026-62960.

• CVE-2026-62960, Git for Windows: Attacker-controlled servers may advertise bundle URIs that point to network shares, causing Windows to transparently perform NTLM authentication and disclose the user's NTLMv2 hash. Since NTLM hashing is weak, the captured hash can potentially be brute-forced to recover the user's credentials. This is addressed by limiting the bundle URIs that git clone respects by the same protocol.<name>.allow rules as usual, which excludes file:// URIs by default.

Changes since Git for Windows v2.55.0(3) (July 14th 2026)

Following the MSYS2 project, on which Git for Windows is based, Windows 8.1 support will be dropped after Git for Windows v2.55.

This is a security fix release, addressing CVE-2026-62960.

• CVE-2026-62960, Git for Windows: Attacker-controlled servers may advertise bundle URIs that point to network shares, causing Windows to transparently perform NTLM authentication and disclose the user's NTLMv2 hash. Since NTLM hashing is weak, the captured hash can potentially be brute-forced to recover the user's credentials. This is addressed by limiting the bundle URIs that git clone respects by the same protocol.<name>.allow rules as usual, which excludes file:// URIs by default.

Changes since Git for Windows v2.54.0(2) (July 14th 2026)

This is a security fix release, addressing CVE-2026-62960.

• CVE-2026-62960, Git for Windows: Attacker-controlled servers may advertise bundle URIs that point to network shares, causing Windows to transparently perform NTLM authentication and disclose the user's NTLMv2 hash. Since NTLM hashing is weak, the captured hash can potentially be brute-forced to recover the user's credentials. This is addressed by limiting the bundle URIs that git clone respects by the same protocol.<name>.allow rules as usual, which excludes file:// URIs by default.

Changes since Git for Windows v2.55.0(2) (July 2nd 2026)

New Features

• Comes with Git Credential Manager v2.9.0.

Bug Fixes

• Fixes heap overflows in the credential helper wincred, see GHSA-rxqw-wxqg-g7hw for full details.

Changes since Git for Windows v2.55.0 (June 29th 2026)

Following the MSYS2 project, on which Git for Windows is based, Windows 8.1 support will be dropped after Git for Windows v2.55.

Bug Fixes

• NTLM opt-in support, which had been prematurely disabled altogether (a glimpse into this fall when NTLM will be disabled, no opt-in possible) was fixed by temporarily enabling optional NTLM support again.

Changes since Git for Windows v2.54.0 (April 20th 2026)

Following the MSYS2 project, on which Git for Windows is based, Windows 8.1 support will be dropped after Git for Windows v2.55.

New Features

• Comes with Git v2.55.0.
• Comes with the MSYS2 runtime (Git for Windows flavor) based on Cygwin v3.6.9.
• Comes with Git Credential Manager v2.8.0.
• Comes with less 702.
• The FSCache now accelerates more git add scenarios.
• Comes with OpenSSL v3.5.7.
• The diff helper handling Word documents was ported from Perl to Rust.
• Comes with Bash v5.3.15.
• Comes with cURL v8.21.0.

Bug Fixes

• A regression in v2.54.0 that could cause endless "Unlink of file '.git/objects/pack/pack-.idx' failed. Should I try again?" loops on older Windows 10 versions during git fetch operations was fixed.
• A bug that prevented proper shutdown of processes launched via Git Bash under certain circumstances was fixed.
• A bug was fixed which could cause parallel checkouts to fail under certain circumstances when the FSCache is enabled.
• Git Bash (MinTTY) now respects screen scaling settings under more circumstances.
• A couple of bugs revolving around very large clones/packfiles/objects were fixed.
• Following TortoiseGit v2.19, .git file validations have been tightened. As a consequence, access to remote repositories via UNC file paths needs to be allowed explicitly via the safe.directory configuration.

Changes since Git for Windows v2.54.0 (April 20th 2026)

Following the MSYS2 project, on which Git for Windows is based, Windows 8.1 support will be dropped after Git for Windows v2.55.

New Features

• Comes with Git v2.55.0-rc2.
• Comes with the MSYS2 runtime (Git for Windows flavor) based on Cygwin v3.6.9.
• Comes with Git Credential Manager v2.8.0.
• Comes with cURL v8.20.0.
• Comes with less 702.
• The FSCache now accelerates more git add scenarios.
• Comes with OpenSSL v3.5.7.
• The diff helper handling Word documents was ported from Perl to Rust.
• Comes with Bash v5.3.15.

Bug Fixes

• A regression in v2.54.0 that could cause endless "Unlink of file '.git/objects/pack/pack-.idx' failed. Should I try again?" loops on older Windows 10 versions during git fetch operations was fixed.
• A bug that prevented proper shutdown of processes launched via Git Bash under certain circumstances was fixed.
• A bug was fixed which could cause parallel checkouts to fail under certain circumstances when the FSCache is enabled.
• Git Bash (MinTTY) now respects screen scaling settings under more circumstances.
• A couple of bugs revolving around very large clones/packfiles/objects were fixed.
• Following TortoiseGit v2.19, .git file validations have been tightened. As a consequence, access to remote repositories via UNC file paths needs to be allowed explicitly via the safe.directory configuration.

Changes since Git for Windows v2.54.0 (Apr 20th 2026)

New Features

• Comes with Git Credential Manager v2.9.0.

Changes since Git for Windows v2.54.0 (April 20th 2026)

Following the MSYS2 project, on which Git for Windows is based, Windows 8.1 support will be dropped after Git for Windows v2.55.

New Features

• Comes with Git v2.55.0-rc1.
• Comes with the MSYS2 runtime (Git for Windows flavor) based on Cygwin v3.6.9.
• Comes with Git Credential Manager v2.8.0.
• Comes with cURL v8.20.0.
• Comes with less 702.
• The FSCache now accelerates more git add scenarios.
• Comes with OpenSSL v3.5.7.
• The diff helper handling Word documents was ported from Perl to Rust.
• Comes with Bash v5.3.15.

Bug Fixes

• A regression in v2.54.0 that could cause endless "Unlink of file '.git/objects/pack/pack-.idx' failed. Should I try again?" loops on older Windows 10 versions during git fetch operations was fixed.
• A bug that prevented proper shutdown of processes launched via Git Bash under certain circumstances was fixed.
• A bug was fixed which could cause parallel checkouts to fail under certain circumstances when the FSCache is enabled.
• Git Bash (MinTTY) now respects screen scaling settings under more circumstances.

Changes since Git for Windows v2.54.0 (April 20th 2026)

Following the MSYS2 project, on which Git for Windows is based, Windows 8.1 support will be dropped after Git for Windows v2.55.

New Features

• Comes with Git v2.55.0-rc0.
• Comes with the MSYS2 runtime (Git for Windows flavor) based on Cygwin v3.6.9.
• Comes with Git Credential Manager v2.8.0.
• Comes with cURL v8.20.0.
• Comes with less 702.
• Comes with Bash v5.3.12.
• The FSCache now accelerates more git add scenarios.
• Comes with OpenSSL v3.5.7.
• The diff helper handling Word documents was ported from Perl to Rust.

Bug Fixes

• A regression in v2.54.0 that could cause endless "Unlink of file '.git/objects/pack/pack-.idx' failed. Should I try again?" loops on older Windows 10 versions during git fetch operations was fixed.
• A bug that prevented proper shutdown of processes launched via Git Bash under certain circumstances was fixed.
• A bug was fixed which could cause parallel checkouts to fail under certain circumstances when the FSCache is enabled.
• Git Bash (MinTTY) now respects screen scaling settings under more circumstances.