Security Advisories (2)
CVE-2014-9390 (2020-02-12)

Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; mine all versions before 08-12-2014; libgit2 all versions up to 0.21.2; Egit all versions before 08-12-2014; and JGit all versions before 08-12-2014 allow remote Git servers to execute arbitrary commands via a tree containing a crafted .git/config file with (1) an ignorable Unicode codepoint, (2) a git~1/config representation, or (3) mixed case that is improperly handled on a case-insensitive filesystem.

CVE-2018-25032 (2022-03-25)

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

Changes for version 0.24 - 2013-03-31

  • Update libgit2 to d2a4a54
  • Config -> bool()/int()/str() now return undef when a configuration variable is not found, instead of segfaulting (GH#13)

Modules

Perl bindings to the Git linkable library (libgit2)
Git blob class
Git branch class
Git commit class
Git config class
Git credentials class
Git diff class
Git index class
Git push class
Git refspec class
Git reference class
Git remote class
Git repository class
Git signature class
Git stash class
Git tag class
Git tree class
Git tree entry class
Git revwalker class