Sourcetree ? ?? Git ??????????
Asked by Ryoji Sobue:

Sourcetree ??? Git ?????????????????????????????(?????????????) ?????????????????????

?????????????????????????????????????????????????????????????  
(?????????????????????????????????????)

<https://nvd.nist.gov/vuln/detail/CVE-2020-5260>

???Sourcetree ?????????Git ?????????????????????????????????

?Sourcetree ?????? ????? ??Git ???????????????????Git ??????????????????? (Update Embedded ???????????????????????????????????)  
????????????????Git???????????????????????Git????? Sourcetree ?????????????????


Answers:
author: Tomoko Suzuki
body: ?????????????????????????

??????????????????????????

* [??????????????](https://www.atlassian.com/ja/trust/security/bug-fix-policy)

CVE-2020-5260 ????????????? Git ????? Sourcetree ????????????????  
????????????????????????????

* [Git vulnerability in multiple versions including 2.26](https://bitbucket.org/blog/git-vulnerability-in-multiple-versions-including-2-26)

??? Sourcetree ? ??Git ???? ????Git ?????????????  
????????????????????????? 2.26.1 ???????Git ?????????

* [Using Embedded Git or System Git in SourceTree](https://confluence.atlassian.com/sourcetreekb/using-embedded-git-or-system-git-in-sourcetree-785323587.html)

comments: author: Ryoji Sobue
body: ??????????????

????????????????  
???????????????SLA?????CVSS ?????????????????????????????????????SLA??????????????2020/04/14 ?? 4????? 2020/05/14 ??????????????????????????????

<https://nvd.nist.gov/vuln/detail/CVE-2020-5260>

?CVSS 3.x NIST 7.5 HIGH  
?CVSS 3.x?CNA 9.3 CRITICAL ? ???????????????????(?)  
?CVSS 2.x?NIST 5.0 MEDIUM

????????????????????????????**??** ??? (CVSS v2 ??? 8 ???CVSS v3 ??? 9 ??) ????? 4 ?????????????

????????????????????????

```
???Sourcetree ?????????Git ?????????????????????????????????

?Sourcetree ?????? ????? ??Git ???????????????????Git ??????????????????? (Update Embedded ???????????????????????????????????)
????????????????Git???????????????????????Git????? Sourcetree ?????????????????
```


author: Tomoko Suzuki
body: CVSS ?????????????????????????????  
CVE-2020-5260 ? CVSS v3 score: 9.3 ??????????????????????????????? 2020/05/14 ???????????????????

???????????????????????????????????????? [Using Embedded Git or System Git in SourceTree](https://confluence.atlassian.com/sourcetreekb/using-embedded-git-or-system-git-in-sourcetree-785323587.html "Using Embedded Git or System Git in SourceTree") ???? 2.26.1 ??? ????Git ?????????
> ?Sourcetree ?????? ????? ??Git ???????????????????Git ??????????????????? (Update Embedded ???????????????????????????????????)  
> ????????????????Git???????????????????????Git????? Sourcetree ?????????????????


author: Ryoji Sobue
body: ??????????????

CVSS ????????????????????????????????????????CVSS ???????????????????????????  
????????????????????????????

<https://bitbucket.org/blog/git-vulnerability-in-multiple-versions-including-2-26?_ga=2.207274650.804736154.1589158505-765655386.1496039391>

????????????????NIST ?????????????????????????????????????????????CVSS ????????????????????
> <https://nvd.nist.gov/vuln/detail/CVE-2020-5260>
>
> ?CVSS 3.x NIST 7.5 HIGH  
> ?CVSS 3.x?CNA 9.3 CRITICAL ? ???????????????????(?)  
> ?CVSS 2.x?NIST 5.0 MEDIUM

Sourcetree ????????Git ???????????????????????????????

???????????????????????????????????


author: Tomoko Suzuki
body: ??????? [Security Advisory Publishing Policy](https://www.atlassian.com/ja/trust/security/advisory-publishing-policy) ????????????? CVE-2020-5260 ???? Atlassian ???? CVSS ?????????????????????

??????????????????????????????????????????????? [??????????????](https://www.atlassian.com/ja/trust/security/advisories) ????????

???????????????????????????????????????????????????????


author: Ryoji Sobue
body: ???????????????

????????????????????????????????????  
?????????????????????  
??????????????????????????

??????????????????????????????

<https://community.atlassian.com/t5/Sourcetree-questions/Sourcetree-%E3%81%A8-Bitbucket-Server-DC-%E3%81%AE%E3%83%90%E3%83%BC%E3%82%B8%E3%83%A7%E3%83%B3%E3%83%9E%E3%83%83%E3%83%81%E3%83%B3%E3%82%B0/qaq-p/1365542#M35937>


author: Jun
body: ????????????
> CVE-2020-5260 ? CVSS v3 score: 9.3 ??????????????????????????????? 2020/05/14 ???????????????????

????????????????????????????Sourcetree???4.0.1????Git??????2.23.0??????4.0.1?ReleaseNote??????????????Git???????????????????????

[Sourcetree 4.0.1 - Minor Release \[09 January 2020\]](https://product-downloads.atlassian.com/software/sourcetree/ReleaseNotes/Sourcetree_4.0.1.html)
> ??????????????????????????????????????????????? [??????????????](https://www.atlassian.com/ja/trust/security/advisories) ????????

[Security Advisories](https://www.atlassian.com/trust/security/advisories) ???????????????

??2020/05/14??2??????????????????????Git????? Sourcetree???????????????????

???????????????????????????

??????????????????????????????


Tags: language-ja