What is the Bug fix release for 7.19.3 for ommand injection vulnerability - CVE-2022-36804

Question

Hi All

I am using BB Server version 7.19.3 what is the Bug fix Release for Bitbucket Server and Data Center - Command injection vulnerability - CVE-2022-36804

Best

Raghu

Anton Shaleev · Answer

Hi Raghu

According to Bitbucket Server and Data Center Advisory 2022-08-24:

* 7.6.17
* 7.17.10
* 7.21.4
* 8.0.3
* 8.1.3
* 8.2.2
* 8.3.1

But as usual, upgrading to the latest bugfix release is recommended since it has all the recent bug fixes in addition to vulnerability fixes.

Robert Wen_Cprime_ · Answer

Hello @RaghuSGS ! Welcome to the Atlassian Community!

According to this notice, you need to upgrade to 7.21.4 or later.

https://confluence.atlassian.com/bitbucketserver/bitbucket-server-and-data-center-advisory-2022-08-24-1155489835.html