[piquadrat]

The version is actually 2.11.0-2ubuntu0.2, with the fix backported, as can be seen in the changelog:

http://changelogs.ubuntu.com/changelogs/pool/main/g/git/git_...

It's somewhat confusing if you run `git --version` and it reports back 2.11.0, despite being fully patched against this vulnerability.

[lotsoflumens]

Thanks for the info!

I've added the git-core PPA now which installs 2.14.1 .

I just don't understand this screwing with version numbers and not being on the latest code.

[richardwhiuk]

The point of having stables releases is that you have a consistent set of versions of packages including git, otherwise how is it stable?

[lotsoflumens]

Yes, it makes a lot of sense to ignore the real world and pretend that software will always be stable.

[0x0]

Why don't you just run Debian Sid then? You'll get new packages every day and get all the fun of chasing changing features all the time :D