Just a heads up: On March 24, 2025, starting at 4:30pm CDT / 19:30 UTC, the site will be undergoing scheduled maintenance for a few hours. During this time, the site might be unavailable for a short while. Thanks for your patience.
×Afaik ES 7.16.2 is using log4j 2.17
https://www.elastic.co/guide/en/elasticsearch/reference/current/release-notes-7.16.2.html
Hi Kristian,
Atlassian notes here that they won't be able to update the bundled elasticsearch to a higher version due to licensing changes. The latest version of bitbucket includes mitigation for the log4j issue found inside elasticsearch. It's also included in the LTS version 7.17.4.
Here's the official ticket: https://jira.atlassian.com/browse/BSERV-13088
If you need to update elasticsearch you can always run elasticsearch on a separate server and connect it to bitbucket. Atlassian's got a great guide on how to do this here:
Hope this helps.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Atlassian Government Cloud has achieved FedRAMP Authorization at the Moderate level! Join our webinar to learn how you can accelerate mission success and move work forward faster in cloud, all while ensuring your critical data is secure.
Register Now
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.