nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

log4j update

/app/atlassian/bitbucket/7.4.2/app/WEB-INF/lib/log4j-api-2.11.1.jar
/app/atlassian/bitbucket/7.4.2/app/WEB-INF/lib/log4j-to-slf4j-2.12.1.jar
/app/atlassian/bitbucket/7.4.2/elasticsearch/lib/log4j-api-2.11.1.jar
/app/atlassian/bitbucket/7.4.2/elasticsearch/lib/log4j-core-2.11.1.jar

Can I Update these log4j to an upper version like 2.16?

Accepted answers

Nic Brough -Adaptavist-

No, it could well break Bitbucket, and it would render you unsupported.

I'm assuming this is in response to the CVE - see https://community.atlassian.com/t5/Trust-Security-articles/Atlassian-s-Response-to-Log4j-CVE-2021-44228 for the guidance on what to do.

All comments

Nic Brough -Adaptavist-

No, it could well break Bitbucket, and it would render you unsupported.

I'm assuming this is in response to the CVE - see https://community.atlassian.com/t5/Trust-Security-articles/Atlassian-s-Response-to-Log4j-CVE-2021-44228 for the guidance on what to do.

what will happen if we delete these log4j files?

Nic Brough -Adaptavist-

Bitbucket will stop working.

How to upgrade log4j files to the 2.16 version?

Nic Brough -Adaptavist-

You do not. You will need to upgrade your bitbucket

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

server

bitbucket

bitbucket-server

cve-2021-44228