Security Advisories (2)
CVE-2014-9390 (2020-02-12)

Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; mine all versions before 08-12-2014; libgit2 all versions up to 0.21.2; Egit all versions before 08-12-2014; and JGit all versions before 08-12-2014 allow remote Git servers to execute arbitrary commands via a tree containing a crafted .git/config file with (1) an ignorable Unicode codepoint, (2) a git~1/config representation, or (3) mixed case that is improperly handled on a case-insensitive filesystem.

CVE-2018-25032 (2022-03-25)

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

Changes for version 0.25 - 2013-10-09

  • Update to libgit2 711333e
    • Rename Branch -> tracking() to upstream() (incompatible change)
    • Rename Remote -> fetchspec() to add_fetch and pushspec to add_push() They will not return the remote spec anymore (incompatible change)
  • Enable support for libssh2 at build-time
  • Add support for SSH key credentials via Cred -> keyfile()
  • Add Remote -> callbacks() method
  • Add Remote -> load() method

Modules

Perl bindings to the Git linkable library (libgit2)
Git blob class
Git branch class
Git commit class
Git config class
Git credentials class
Git diff class
Git index class
Git push class
Git refspec class
Git reference class
Git remote class
Git repository class
Git signature class
Git stash class
Git tag class
Git tree class
Git tree entry class
Git revwalker class