Bitbucket vulnerable to Terrapin weakness?

[DW]

Hello,

out security team reported, that the integrated SSH server in Bitbucket is vulnerable to a weakness called terrapin, which allows man-in-the-middle-attack.

What is the status regarding a security update? Bitbucket 7.21.22 was released but if we belive the changelog, there is no terrapin fix inside.

[Jodie Vlassis]

Hi @DW 

Please email security@atlassian.com to follow up.

Thank you

Jodie

[Aimee White]

This is worrying. 

[Colin.McDermott]

We really need a guide or better information on this.