The Atlassian Community Forums are currently in read-only mode. We will be relaunching on a new platform on September 22 (read more here). We apologize for the extended downtime. For concerns or questions, please email communitymanagers@atlassian.com. See you on the other side, on the new Atlassian Community Forums! :)

×
Forums
Home Q&A Discussion groups Articles Ask a question Search
Learning
Events
Champions
Release Notes
Community
Forums
Home Q&A Discussion groups Articles Ask a question Search
Learning Events Champions Release Notes
Forums
Home Q&A Discussion groups Articles Ask a question Search
Learning Events Champions Release Notes

Forums

Articles
Create
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Q&A
See all
Community resources
Top groups
Explore all groups
Community resources
Learn
Community resources
Events
Community resources

SourceTree: Shellshock and embedded Git

David Buser
David Buser
Contributor
October 29, 2014

Hi there, I'm running SourceTree v1.6.8.0 on Windows. I am using embedded Git v1.8.3 which appears to be dated 20130601. The security folks at work are concerned that the version of bash included in this software might be vulnerable to shellshock ... anyone know how I should respond to them? THanks!

Watch
Like Jürgen Starek likes this
840 views

2 answers

Comments for this post are closed

Community moderators have prevented the ability to post new answers.

1 vote
Seth
Seth
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Champions.
Get recognized
October 29, 2014

Disclaimer: I'm not a security expert.

I would assume the bash version does have the vulnerability, until @Steve Streeting or someone at Atlassian can say differently.

However, unless you provide remote access to this bash installation, I'm not sure how it would be taken advantage of. If a malicious third party gains enough access to your computer to execute commands with SourceTree's bash, you're already screwed.

 

View More Comments
David Buser
David Buser
Contributor
November 4, 2014

@Steve Streeting any thoughts on this?

Like
Reply
0 votes
Balázs Szakmáry
Balázs Szakmáry
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Champions.
Get recognized
October 29, 2014

Our IT department had similar concerns about the PuTTY version that comes with SourceTree.

Reply
Sourcetree
Sourcetree
TAGS
AUG Leaders

Atlassian Community Events

    See all events
    Community
    Forums
    FAQs Forums guidelines
    Learning
    About learning Resources
    Events
    Champions
    Release Notes
    Copyright © 2026 Atlassian
    Privacy Policy Notice at Collection Terms Security