to which version should we upgrade our bitbucket server/data center

[Aaya Abdelnabi]

regarding this vulnerability ... 

https://confluence.atlassian.com/bitbucketserver/bitbucket-server-and-data-center-advisory-2022-08-24-1155489835.html

we have version 7.17.1, is this affected by this vulnerability ? 

+ which version you advise us to. upgrade to? 

[Fabio Racobaldo _Herzum_ · Accepted solution]

Hi @Aaya Abdelnabi ,

welcome to the Atlassian community!

7.17.10 is not affected by CVE-2022-36804

Fabio

[Aaya Abdelnabi]

hi @Fabio Racobaldo _Herzum_ 

sorry i meant version 7.17.1 not 10 

[Fabio Racobaldo _Herzum_]

so you need to upgrade to :

• 7.17.10 (LTS) or newer
• 7.21.4 (LTS) or newer

[Aaya Abdelnabi]

based on what we decide, and which would be a stable version for us?

[Fabio Racobaldo _Herzum_]

my suggestion is to go to the latest LTS version, so 7.21.4

All LTS should be a stable version

[Aaya Abdelnabi]

ok got it, thanks @Fabio Racobaldo _Herzum_ for the fast response .

[Fabio Racobaldo _Herzum_]

you're welcome @Aaya Abdelnabi 

[Nic Brough -Adaptavist-]

Just to be clear, all released versions are "stable".  Atlassian only releases "unstable" versions in their "early access" programme.

"Stable" doesn't really have any meaning when talking about Atlassian software, or in fact, almost all software nowadays, it's a meaningless concept.

[Aaya Abdelnabi]

@Fabio Racobaldo _Herzum_ just noticed that latest version on 7.20.0 , couldn't see 7.21.4

[Aaya Abdelnabi]

nervermind, found it

[Gabriel Mstowski]

Hi All,

What about 7.19.1 version? Is it vulnerable?

[Pramodh M]

Hi @Aaya Abdelnabi 

As it is suggested version in fixed in 7.17.10 it's not in affected version.

Thanks,
Pramodh