I'm confused about the timeline here, the tag for 2.50.1 is from 2025-06-16 ( ht... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

capitol_ on July 9, 2025 | parent | context | favorite | on: Breaking Git with a carriage return and cloning RC...

I'm confused about the timeline here, the tag for 2.50.1 is from 2025-06-16 ( https://github.com/git/git/tags ). And the date for 2.50.1 on https://git-scm.com is also 2025-06-16.

But it seems like almost no distributions have patched it yet

https://security-tracker.debian.org/tracker/CVE-2025-48386 (debian as an example)

And the security advisory is from yesterday: https://github.com/git/git/security/advisories/GHSA-4v56-3xv...

Did git backdate the release?

CodesInChaos on July 9, 2025 [–]

That's the time the commit was authored, not the time the tag was published.

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact