Multiple Products Security Advisory - Git Buffer Overflow - CVE-2022-41903, CVE-2022-23521

[Zeller]

Hello,
I have a question about CVEs:
CVE-2022-41903
CVE-2022-23521
we are currently using the versions (without docker)
bitbucket 7.17.10 LTS
and
bamboo 8.0.9
in the article from Atlassian it is said that you should update to the latest version. Does this mean you should upgrade to
bitbucket 8.8.1
bamboo 9.2.1
or
bitbucket 7.17.15 LTS
bamboo 8.2.7
update

best regards Dima

Translated with www.DeepL.com/Translator (free version)

[Vedant Kulkarni]

@Dmitrij Zeller , you should first upgrade the Git version if it is mentioned in the affected version. Which versions of Git are you using?

[Zeller]

@Vedant Kulkarni  Hello, we are using 2.7.4

[Zeller]

Thanks @Vedant Kulkarni

  I got it wrong, I have now updated it

[Vedant Kulkarni]

@Dmitrij Zeller

you should upgrade Git to 2.39.2 and compatible Bitbucket version 8.8.1