Any updates on when a new Bitbucket Server release is coming with ES min 7.16.2?

Question

Afaik ES 7.16.2 is using log4j 2.17
https://www.elastic.co/guide/en/elasticsearch/reference/current/release-notes-7.16.2.html

Kristian Lind_qzg26w · Answer

Thanks for the response Stephen.

Stephen Garber · Answer

Hi Kristian,

Atlassian notes here that they won't be able to update the bundled elasticsearch to a higher version due to licensing changes. The latest version of bitbucket includes mitigation for the log4j issue found inside elasticsearch. It's also included in the LTS version 7.17.4.

Here's the official ticket: https://jira.atlassian.com/browse/BSERV-13088

If you need to update elasticsearch you can always run elasticsearch on a separate server and connect it to bitbucket. Atlassian's got a great guide on how to do this here:

https://confluence.atlassian.com/bitbucketserver/how-to-install-and-configure-a-remote-elasticsearch-instance-815577748.html

Hope this helps.