When is the update for Sourcetree, addressing CVE-2024-31497 and including the fixed version of the

[kevin hernandez]

The critical vulnerability CVE-2024-31497 affecting PuTTY (including Pageant) versions 0.68 to 0.80 was disclosed on April 12, 2024, alongside the release of PuTTY tools version 0.81, which addresses the issue.

However, the most recent Sourcetree release continues to include PuTTY tools version 0.77. When can we expect a Sourcetree update incorporating PuTTY tools version 0.81 or later?

[Brant Schroeder]

@kevin hernandez welcome to the Atlassian community

This has been addressed in SourceTree 3.4.19 [13 July 2024] or later.