Will SourceTree 1.x continue to receive security updates?

I received the security alert email about SourceTree.

I tried SourceTree 2.x and it's absolutely unusable in it's current state. The removal of the left side repository bar makes it a non-starter for me.  You can't tell which repos is currently select or which repos have available pulls etc.

Will SourceTree 1.x receive any updates to resolve the security issue? If so, is there an ETA?

I'd rather not continue using a product with a known / disclosed security issue in production, but since 2.x is unusable, I need to know if 1.x will be updated so I can plan accordingly.

1 answer

1 accepted

0 votes
Accepted answer

Just received this on my helpdesk ticket I put in:



We will not be updating version 1.0 of SourceTree to address the security issue, however, as a workaround, you can download the latest version of Git at https://git-scm.com/downloads, and then switch to using System GIT in your preferences menu for SourceTree.

We do not test older versions of SourceTree against the latest versions of GIT, so we cannot guarantee that you will not run in to future issues.

Alternatively, you can uncheck the option "Use this version of SourceTree for UIR Association" in the Tools/Options/General Tab and remove the following registry key "HKEY_CURRENT_USER\SOFTWARE\Classes\sourcetree\shell\opencommand" - this disables the handling of the "sourcetree://" protocol.

Suggest an answer

Log in or Sign up to answer
Community showcase
Published Oct 23, 2018 in Sourcetree

Tip from the team: configure your repos for hosting goodness!

Supported Platforms macOS Windows We recently introduced support for additional hosting services such as GitHub Enterprise, GitLab (Cloud, Community Edition, Enterprise Edition), and...

1,095 views 4 2
Read article

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you