Security Advisories (2)
CVE-2014-9390 (2020-02-12)

Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; mine all versions before 08-12-2014; libgit2 all versions up to 0.21.2; Egit all versions before 08-12-2014; and JGit all versions before 08-12-2014 allow remote Git servers to execute arbitrary commands via a tree containing a crafted .git/config file with (1) an ignorable Unicode codepoint, (2) a git~1/config representation, or (3) mixed case that is improperly handled on a case-insensitive filesystem.

CVE-2018-25032 (2022-03-25)

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

Changes for version 0.17 - 2012-12-04

  • Update libgit2 to da82043
    • Add Tag -> foreach() method
  • Documentation fixes (no functional changes)
  • Add Branch -> is_head() method
  • Add Config -> new(), add_file(), refresh() and foreach() methods
  • Add Index -> read_tree() and remove() methods
  • Add Repository -> checkout() method
  • Support custom checkout strategies in Repository -> clone() and checkout() methods
    • This adds an additional parameter to Repository -> clone() (incompatible change)
  • SSL support is now enabled if OpenSSL is present at build time

Modules

Perl bindings to the Git linkable library (libgit2)
Git blob class
Git branch class
Git commit class
Git config class
Git diff class
Git index class
Git refspec class
Git reference class
Git remote class
Git repository class
Git signature class
Git stash class
Git tag class
Git tree class
Git tree entry class
Git revwalker class