Community
Products
Sourcetree
Questions
SourceTree: Shellshock and embedded Git

SourceTree: Shellshock and embedded Git

Hi there, I'm running SourceTree v1.6.8.0 on Windows. I am using embedded Git v1.8.3 which appears to be dated 20130601. The security folks at work are concerned that the version of bash included in this software might be vulnerable to shellshock ... anyone know how I should respond to them? THanks!

2 answers

1 vote

Disclaimer: I'm not a security expert.

I would assume the bash version does have the vulnerability, until @Steve Streeting or someone at Atlassian can say differently.

However, unless you provide remote access to this bash installation, I'm not sure how it would be taken advantage of. If a malicious third party gains enough access to your computer to execute commands with SourceTree's bash, you're already screwed.

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

Comment

@Steve Streeting any thoughts on this?

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

Comment

0 votes

Our IT department had similar concerns about the PuTTY version that comes with SourceTree.

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

Product Q&A

Community resources

Support

Top groups

Community resources

Support

Learn

Community resources

Support

Events

Community resources

Support

Get product advice from experts

Join a community group

Advance your career with learning paths

Earn badges and rewards

Connect and share ideas at events

SourceTree: Shellshock and embedded Git

2 answers

Suggest an answer

Was this helpful?

Thanks!

TAGS

Atlassian Community Events