Security Advisories (2)
CVE-2018-10888 (2018-07-10)

A flaw was found in libgit2 before version 0.27.3. A missing check in git_delta_apply function in delta.c file, may lead to an out-of-bound read while reading a binary delta file. An attacker may use this flaw to cause a Denial of Service.

CVE-2018-10887 (2018-07-10)

A flaw was found in libgit2 before version 0.27.3. It has been discovered that an unexpected sign extension in git_delta_apply function in delta.c file may lead to an integer overflow which in turn leads to an out of bound read, allowing to read before the base object. An attacker may use this flaw to leak memory addresses or cause a Denial of Service.

NAME

Git::Raw::Cred - Git credentials class

VERSION

version 0.79

DESCRIPTION

A Git::Raw::Cred object is used to store credentials.

WARNING: The API of this module is unstable and may change without warning (any change will be appropriately documented in the changelog).

METHODS

userpass( $user, $pass )

Create a new credential object with the given username and password.

sshkey( $user, $public, $private [, $pass ] )

Create a new credential object given a SSH public and private key files, and optionall the password of the private key. If the SSH support has not been enabled at build-time, this method will always return undef.

sshagent( $user )

Create a new credential object used for querying an ssh-agent. If the SSH support has not been enabled at build-time, this method will always return undef.

sshinteractive( $user, $callback )

Create a new credential object based on interactive authentication. The callback $callback will be invoked when the remote-side issues a challenge. It receives the following parameters: $name, $instruction and @prompts. Any of the parameters passed to the callback may be undefined. Each $prompt entry in @prompts is a hash reference that may contain:

  • "text"

    Text for the prompt.

  • "echo"

    Parameter indicating whether the response of the challenge is safe to be echoed.

The callback should return a list of responses, one for each prompt. If the SSH support has not been enabled at build-time, this method will always return undef.

AUTHOR

Alessandro Ghedini <alexbio@cpan.org>

Jacques Germishuys <jacquesg@striata.com>

LICENSE AND COPYRIGHT

Copyright 2012 Alessandro Ghedini.

This program is free software; you can redistribute it and/or modify it under the terms of either: the GNU General Public License as published by the Free Software Foundation; or the Artistic License.

See http://dev.perl.org/licenses/ for more information.