Showing results for 
Search instead for 
Did you mean: 
Sign up Log in

Sourcetree Log4j vulnerability

Val Lieder
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
December 28, 2021

Dear Atlassian Support-Team,

currently there is a critical vulnerability Critical vulnerability in log4j published (CVE-2021-44228) in Java issued by BSI with alert level red.
Could you please so be kind to let us know if your application "Sourcetree", that we have in use, is affected by this vulnerability and please answer the following questions:

- Is there already a patch for this application?

- If there is no patch, is there at least a workaround to temporarily close the vulnerability?

- What is the version of the log4j java module you are using ?

- Is it possible to update to a higher version of this log4j java module (version >= 2.15) ?


Attached is the link to the vulnerability reported by BSI:

Thanks and regards
Valerian Lieder (IT)

1 answer

1 vote
Natchiar Venkatachalam
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
December 28, 2021

SourceTree is not using log4j an hence is not affected by this vulnerability.

Suggest an answer

Log in or Sign up to answer
AUG Leaders

Atlassian Community Events