Uploaded image for project: 'Sourcetree for Windows'
  1. Sourcetree for Windows
  2. SRCTREEWIN-5285

Update to a version of git that contains a fix for CVE-2016-2324 and CVE‑2016‑2315

      As outlined in http://seclists.org/oss-sec/2016/q1/645 , we are potentially vulnerable to remote code execution (the actual bugs trigger heap overflow) as sourcetree for windows bundles version 2.7.3 of git.

      Update to a version of git that addresses CVE-2016-2324 and CVE‑2016‑2315 (git 2.4.11, 2.5.5, 2.6.6 and 2.7.4 all have the fix).

            [SRCTREEWIN-5285] Update to a version of git that contains a fix for CVE-2016-2324 and CVE‑2016‑2315

            Monique Khairuliana (Inactive) made changes -
            Workflow Original: JAC Bug Workflow v3 [ 3454003 ] New: SRCTREE JAC Bug Workflow [ 3743494 ]
            Monique Khairuliana (Inactive) made changes -
            Workflow Original: SourceTree Bug Workflow [ 1148818 ] New: JAC Bug Workflow v3 [ 3454003 ]
            Status Original: Resolved [ 5 ] New: Closed [ 6 ]
            David Black made changes -
            Security Original: Reporter and Atlassian Staff [ 10751 ]
            David Black made changes -
            Remote Link New: This issue links to "SCT-2946 (Atlassian JIRA Extranet - Special Projects)" [ 167212 ]
            David Black made changes -
            Remote Link Original: This issue links to "Page (Extranet)" [ 167029 ]
            David Black made changes -
            Remote Link New: This issue links to "Page (Extranet)" [ 167029 ]
            minnsey made changes -
            Resolution New: Fixed [ 1 ]
            Status Original: In Progress [ 3 ] New: Resolved [ 5 ]
            minnsey made changes -
            Fix Version/s New: 1.8.3 [ 61393 ]
            minnsey made changes -
            Fix Version/s Original: 1.8.2.12 [ 61497 ]
            Security Metrics Bot made changes -
            Labels Original: CVE-2016-2324 CVE‑2016‑2315 security New: CVE-2016-2324 CVE‑2016‑2315 cvss-high security

              mminns minnsey
              dblack David Black
              Affected customers:
              0 This affects my team
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: