Loading...

XML

Word

Printable

Details

Type: Bug
Resolution: Fixed
Priority: Low
Fix Version/s: 7.11.0, 7.6.9
Affects Version/s: 7.4.0, 7.3.2, 7.3.3, 7.5.0, 7.6.0, 7.6.3
Component/s: Tomcat, Upgrade
Labels:

Fixed in Long Term Support Release/s:

Download 7.6
Introduced in Version:
7.03
Support reference count:
15
Symptom Severity:
Severity 1 - Critical
UIS:
34
Bug Fix Policy:
View Atlassian Server bug fix policy
Current Status:

Hide

Atlassian Update – 1 October 2018

Hello everyone,

Just to clarify.
Jira 7.6.9 will be using Tomcat version 8.5.29.
Jira 7.12.3 and up will be on version 8.5.32. See ~~JRASERVER-68058~~

The current ticket is marked resolved because at least one version got their changes released.

Cheers.

Piotr Suwała
Jira Server Bugfix Dev

Show
Atlassian Update – 1 October 2018 Hello everyone, Just to clarify. Jira 7.6.9 will be using Tomcat version 8.5.29 . Jira 7.12.3 and up will be on version 8.5.32 . See JRASERVER-68058 The current ticket is marked resolved because at least one version got their changes released. Cheers. Piotr Suwała Jira Server Bugfix Dev

Description

Current version of Tomcat 8.5.6 bundled with JIRA 7.3.x is vulnerable to https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.9.

Customer would like the Tomcat to be upgraded to the latest version available as their client is no longer willing to run JIRA without having the tomcat patched with the latest security updates.

Questions:

Is it in the road map to include latest Tomcat? If yes, from which version onwards?
Is there any steps which customer can follow to upgrade the bundled Tomcat from 8.5.6 to 8.5.12?

Attachments

- Sort By Name
- Sort By Date
- Ascending
- Descending
- Thumbnails
- List

image-2018-01-16-07-59-42-762.png
59 kB
16/Jan/2018 12:59 PM
image-2018-01-16-07-59-53-288.png
59 kB
16/Jan/2018 12:59 PM

Issue Links

is duplicated by

JRASERVER-65601 Support for Tomcat 8.5.16

Closed

is related to

JRASERVER-67974 JQL search panel is missing when viewing saved filter due to missing Tomcat parameters

Closed

relates to

JRASERVER-65102 Update bundled Apache Tomcat due to security vulnerabilities

Closed

RAID-284 Loading...

RAID-335 Loading...

was cloned as

JRASERVER-68058 Upgrade Tomcat to the version 8.5.32

Closed

mentioned in: Page Loading...; Page Loading...; Page Loading...

(1 was cloned as, 3 mentioned in)

Activity

People

Assignee:: ΞΔ (Inactive)

Reporter:: Sean Chew (Inactive)

Votes:: 19 Vote for this issue

Watchers:: 35 Start watching this issue

Dates

Created:: 14/Mar/2017 1:20 PM

Updated:: 22/May/2020 8:23 AM

Resolved:: 11/Jul/2018 9:50 AM