Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in
It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Atlassian Community Hero Image Collage

Sourcetree Log4j vulnerability

Dear Atlassian Support-Team,

currently there is a critical vulnerability Critical vulnerability in log4j published (CVE-2021-44228) in Java issued by BSI with alert level red.
Could you please so be kind to let us know if your application "Sourcetree", that we have in use, is affected by this vulnerability and please answer the following questions:


- Is there already a patch for this application?

- If there is no patch, is there at least a workaround to temporarily close the vulnerability?

- What is the version of the log4j java module you are using ?

- Is it possible to update to a higher version of this log4j java module (version >= 2.15) ?

 

Attached is the link to the vulnerability reported by BSI:
https://www.bsi.bund.de/DE/Service-Navi/Presse/Pressemitteilungen/Presse2021/211211_log4Shell_WarnstufeRot.html


Thanks and regards
Valerian Lieder (IT)

1 answer

SourceTree is not using log4j an hence is not affected by this vulnerability.

Suggest an answer

Log in or Sign up to answer
TAGS
Community showcase
Published in Sourcetree

Tip from the team: configure your repos for hosting goodness!

Supported Platforms macOS Windows We recently introduced support for additional hosting services such as GitHub Enterprise, GitLab (Cloud, Community Edition, Enterprise Edition), and...

7,182 views 5 13
Read article

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you