SOURCETREE & CVE-2022-41903 CVE-2022-23521 CVE-2022-41953

[Jose Ribeiro]

Hello,

We use SourceTree in our company and since GIT has a vulnerability in their code we would like to know if the version of GIT SourceTree uses is affected and if so, is there a ETA for a new version.

Thank you

[Tarik Kobalas · Accepted solution]

Any update on this version @Vipin Yadav

I assume 3.4.12-beta in your comment is supposed to be 3.4.21-beta, right?

[Vipin Yadav]

Hi Tarik, 

We have released beta. you can download from this link. 

https://product-downloads.atlassian.com/software/sourcetree/windows/beta/SourceTreeSetup-3.4.12-beta-1.exe

We will also release GA with phase out manner till next week. 

Thanks,

Vipin

[Jose Ribeiro]

Thank you so much Vipin!

[Vipin Yadav]

Hi Jose, 

Thanks for updating about Git CVE and we are aware and already started working on latest git version and will soon release new version of sourcetree. It can take 15-20 days to roll out. 

Thanks,

Vipin

[Jose Ribeiro]

Hi Vipin,

Thank you very much for you fast answer.

We will take measures accordingly.

Best Regards,

José

[Jose Ribeiro]

Good Morning,

@Vipin Yadav 

Do you have any news regarding the new update?

Thank you!

[Vipin Yadav]

Hi Jose,

We are in the last phase of testing and in next 2-3 days, we will release 3.4.12-beta version. 

Thanks,

Vipin

[Jose Ribeiro]

Thank you Vipin!

Best Regards,

José