Embedded git need to be updated

[Lars Klein]

The embedded git should be updated to cover CVE 2025 48384

Of course system git can be upgraded and used, but a lot of users will just work with the embedded which is not really secure with the current 2.46.0

[Reetika Narula]

Hi @Lars Klein ,

We are updating Git to the latest version (v2.51.0), which will be included in SourceTree v3.4.25. This update will be available in two weeks.

[Lars Klein]

Hi @Reetika Narula

maybe 2.51.0 is not the best decision. It should be compatible with latest LTS 9.4 and therefore 2.50.x 

See also https://confluence.atlassian.com/bitbucketserver094/supported-platforms-1489803095.html

Most Enterprise companies are on LTS releases and not on latest release, therefore Souretree should be compatible to latest LTS

Thanks and bye,
Lars

[SMS]

Hi @Lars Klein,

Good morning, and welcome to Atlassian Community! It's nice to have you here.

I was unable to find an answer for you, so I've raised a ticket on your behalf, and someone will be reaching out to you shortly.

Thank you for your patience, and take care,

Shannon S | Atlassian Community Support

[SMS]

Hi Lars,

Just to let you know you will receive a confirmation email from atlassian.com with your ticket details within the next few minutes. Please check your spam or junk folder if you don't see this in your inbox!

Shannon

[Shawn Doyle - ReleaseTEAM]

Hi @Lars Klein 

I agree and a quick look at sourcetree looks like it is still not patched.  

I'll request Atlassian assistance on this.