Security Advisories (3)
CVE-2018-25032 (2022-03-25)

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

CVE-2018-8098 (2018-03-14)

Integer overflow in the index.c:read_entry() function while decompressing a compressed prefix length in libgit2 before v0.26.2 allows an attacker to cause a denial of service (out-of-bounds read) via a crafted repository index file.

CVE-2018-8099 (2018-03-14)

Incorrect returning of an error code in the index.c:read_entry() function leads to a double free in libgit2 before v0.26.2, which allows an attacker to cause a denial of service via a crafted repository index file.

NAME

Git::Raw - Perl bindings to the Git linkable library (libgit2)

VERSION

version 0.25

DESCRIPTION

libgit2 is a pure C implementation of the Git core methods provided as a re-entrant linkable library designed to be fast and portable with a solid API. This module provides Perl bindings to the libgit2 API.

WARNING: The API of this module is unstable and may change without warning (any change will be appropriately documented in the changelog).

AUTHOR

Alessandro Ghedini <alexbio@cpan.org>

LICENSE AND COPYRIGHT

Copyright 2012 Alessandro Ghedini.

This program is free software; you can redistribute it and/or modify it under the terms of either: the GNU General Public License as published by the Free Software Foundation; or the Artistic License.

See http://dev.perl.org/licenses/ for more information.