Upgrading Git/Mercurial in SourceTree for Mac
問題
原因
Security vulnerability CVE-2014-9390
ソリューション
If you are running SourceTree for Mac version 2.0.3 or earlier here's how fix your Git/Hg versions:
Security vulnerability CVE-2014-9390
If you are running SourceTree version 2.0.3 or earlier here's how fix your Git/Hg versions:
Update Git
- Download Git version 2.2.1 or later - at the time of writing git-scm.com's download page still links an older binary version for Mac so download from here instead: http://sourceforge.net/projects/git-osx-installer/files/latest/download
- Open the Git DMG and run the included install package
- Open a fresh terminal and run 'git --version' from the command line and check that it says version 2.2.1. If not, edit ~/.profile or ~/.bash_profile and add to the bottom: "export PATH=/usr/local/git/bin:$PATH", then close & re-open your terminal and repeat the test
- Open SourceTree, then press "⌘," to open Preferences
- Select the Git tab, then click the 'Use System Git' button - in the Finder window make sure the version in /usr/local/git/bin is selected
- The Git Version box should now report 'System Git version 2.2.1'
Update Mercurial
Currently the hgsubversion extension packaged with SourceTree does not work with Mercurial 3.2.3 and must be disabled. This will be addressed in a future update. Disable it before updating to avoid errors:
- Open SourceTree, then press "⌘," to open Preferences
- Select the Mercurial tab
- In the Extensions box, scroll down until you see the hgsubversion line
- Uncheck the box & close Preferences
Updating Mercurial:
- Download Mercurial version 3.2.3+ for your OS from http://mercurial.selenic.com/downloads
- Run the installer
- Open a fresh terminal and run 'hg --version', check that it is 3.2.3 or later. If not run 'which hg' and uninstall that version (hg's installer installs in /usr/local/bin so should not be an issue)
- Open SourceTree, then press "⌘," to open Preferences
- Select the Mercurial tab, then click the 'Use System Mercurial' button
- The Git Version box should now report 'System Mercurial version 3.2.3'
You now have versions of Git & Hg on the command line and in SourceTree that are not vulnerable to this issue.
To upgrade the version of Git/Mercurial used in SourceTree you can go to your SourceTree preferences either by hitting ⌘, or via the SourceTree menu > Preferences and going to either the Git and Mercurial tabs. From here you can then go to the 'Git Version' or 'Mercurial Version' boxes respectively and selecting either 'Reset to embedded Git/Hg' or 'Use System Git/Hg'. When selecting 'Use System Git/Hg' you are then prompted to select the location on your system.
