Uploaded image for project: 'Sourcetree for Windows'
  1. Sourcetree for Windows
  2. SRCTREEWIN-5918

SourceTree 7za Vulnerability.

XMLWordPrintable

      SourceTree Version 1.8.3 installs a 7za.exe (C:\Program Files (x86)\Atlassian\SourceTree\tools\7za.exe) in Version 9.20, which has known vulnerabilities:
      CVE-2016-2334
      CVE-2016-2335

      More information about the vulnerabilities: http://blog.talosintel.com/2016/05/multiple-7-zip-vulnerabilities.html

            [SRCTREEWIN-5918] SourceTree 7za Vulnerability.

            Yasmine made changes -
            Labels Original: security New: cvss-medium security
            Yasmine made changes -
            Labels Original: cvss-medium security New: security
            Monique Khairuliana (Inactive) made changes -
            Workflow Original: JAC Bug Workflow v3 [ 3450530 ] New: SRCTREE JAC Bug Workflow [ 3741210 ]
            Monique Khairuliana (Inactive) made changes -
            Workflow Original: SourceTree Bug Workflow [ 1580264 ] New: JAC Bug Workflow v3 [ 3450530 ]
            Status Original: Resolved [ 5 ] New: Closed [ 6 ]
            minnsey made changes -
            Resolution New: Fixed [ 1 ]
            Status Original: In Progress [ 3 ] New: Resolved [ 5 ]
            minnsey made changes -
            Fix Version/s New: 1.9.7-beta-0 [ 62738 ]
            minnsey made changes -
            Status Original: Open [ 1 ] New: In Progress [ 3 ]
            minnsey made changes -
            Fix Version/s New: 1.9.7 [ 62732 ]
            minnsey made changes -
            Assignee New: minnsey [ mminns ]
            Security Metrics Bot made changes -
            Due Date New: 09/Sep/2016

              mminns minnsey
              gsackett Gary
              Affected customers:
              0 This affects my team
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: