nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Java Vulnerability "/App/atlassian/bitbucket/jre/bin/java 1.8.0_172-b11 Enhanced#"

Nitesh Kumar_hgxkxh

Hi All,

We are using Bitbucket in private cloud -

Atlassian Bitbucket v5.11.1

And recently received following vulnerability.

"/App/atlassian/bitbucket/jre/bin/java 1.8.0_172-b11 Enhanced#"

CVE ID - CVE-2021-2161, CVE-2021-2163

May you please advise how we can fix this? I will really appreciate any quick response on it.

Warm Regards,

Nitesh

Accepted answers

Gonchik Tsymzhitov

Hi @Nitesh Kumar ,

If you want to fix only java vuln, you update the version of JRE.

via replacement in /App/atlassian/bitbucket/jre/ . (Please, don't forget to make a backup and use the java 8. )

Also, please, be aware you're using quite old version of Bitbucket, I do recommend you to upgrade.

https://confluence.atlassian.com/bitbucketserver/bitbucket-server-5-11-release-notes-950274914.html

All comments

Gonchik Tsymzhitov

Hi @Nitesh Kumar ,

If you want to fix only java vuln, you update the version of JRE.

via replacement in /App/atlassian/bitbucket/jre/ . (Please, don't forget to make a backup and use the java 8. )

Also, please, be aware you're using quite old version of Bitbucket, I do recommend you to upgrade.

https://confluence.atlassian.com/bitbucketserver/bitbucket-server-5-11-release-notes-950274914.html

Nic Brough -Adaptavist-

Be aware that changing the version of Java under your Bitbucket is not recommended, as Atlassian only supports you running on the Java that was distributed with the version of Bitbucket you're on.

An upgrade will change the java version if the new Bitbucket version uses a later releases, so it's a good idea to go this way, and I completely agree with Gonchik's recommendation to upgrade Bitbucket

Nitesh Kumar_hgxkxh

@Nic Brough -Adaptavist- @Gonchik Tsymzhitov thank you both for your quick response and advise.

Nitesh Kumar_hgxkxh

@Nic Brough -Adaptavist- @Gonchik Tsymzhitov can you also please suggest if Bitbucket v5.11.1 supports OpenJDK also so that I can use that instead of Oracle Java, and OpenJDK will be updated itself during server patching itself whenever there a patch of that.

Current version in use is::

~]$ /App/atlassian/bitbucket/jre/bin/java -version
java version "1.8.0_172"
Java(TM) SE Runtime Environment (build 1.8.0_172-b11)
Java HotSpot(TM) 64-Bit Server VM (build 25.172-b11, mixed mode)

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

server

bitbucket

bitbucket-server