We're reviewing the popular Gitflow as our git branching model and I've liked it so far. One case I'm not sure about is the production rollback. Say we've there's a new feature that we're planning to publish in the upcoming release. The feature is tested and finally merged to master. Either automatically or manually the source code in the master is built and deployed. Shortly after deploying we reveal a critical bug and immediately create a hotfix branch. All right, so far so good. But we roll back the production version to the most recent working one. That means the program that's running in production does not match the source in the master branch. And anyone who branches off from master will something different that's really working. How do you coup with this case?

We're reviewing the popular Gitflow as our git branching model and I've liked it so far. One case I'm not sure about is the production rollback. Say we've there's a new feature that we're planning to publish in the upcoming release. The feature is tested and finally merged to master. Either automatically or manually the source code in the master is built and deployed. Shortly after deploying we reveal a critical bug and immediately create a hotfix branch. All right, so far so good. But we roll back the production version to the most recent working one. That means the program that's running in production does not match the source in the master branch. And anyone who branches off from master will something different that's really working. How do you cope with this case?