Download Latest Version libgit2 v1.8.5 source code.tar.gz (7.6 MB)
Email in envelope

Get an email when there's a new version of libgit2

Home / v1.8.5
Name Modified Size InfoDownloads / Week
Parent folder
libgit2 v1.8.5 source code.tar.gz 2025-12-06 7.6 MB
libgit2 v1.8.5 source code.zip 2025-12-06 12.2 MB
README.md 2025-12-06 775 Bytes
Totals: 3 Items   19.8 MB 1

v1.8.5

🔒 This is a security release with multiple changes.

  • A bug in the external SSH execution is fixed that could cause arbitrary command execution. Remote repository names were improperly sent to the shell without quoting. Arguments to the external SSH command are now sent parameterized.

  • A bug in SSH credential creation is fixed that could cause a buffer overflow. Public keys that are not NUL terminated were improperly zeroed. The given length of public keys is now honored.

The libgit2 project thanks @0xkato and @bakersdozen123 for finding the bugs and providing details and reproduction steps.

All users of the v1.8 release line are recommended to upgrade.

Full Changelog: https://github.com/libgit2/libgit2/compare/v1.8.4...v1.8.5

Source: README.md, updated 2025-12-06