Loading...

XML

Word

Printable

Details

Type: Suggestion
Resolution: Fixed
Fix Version/s: 7.13.0, 7.12.1, 7.6.9, 8.0.0
Component/s: Installation
Labels:

UIS:
17
Support reference count:
7
Fixed in Long Term Support Release/s:

Download 7.13, 7.6
Current Status:

Hide

Atlassian Update – 21 December 2018

Dear Jira users,

We’re glad to announce that this issue will be addressed in our upcoming 8.0 release.

You can find more details about our 8.0 beta release here — https://community.developer.atlassian.com/t/beta-for-jira-8-0-is-up-for-grabs/25588

Looking forward to your feedback!

Kind regards,
Syed Masood
Product Manager, Jira Server and Data Center

Show
Atlassian Update – 21 December 2018 Dear Jira users, We’re glad to announce that this issue will be addressed in our upcoming 8.0 release. You can find more details about our 8.0 beta release here — https://community.developer.atlassian.com/t/beta-for-jira-8-0-is-up-for-grabs/25588 Looking forward to your feedback! Kind regards, Syed Masood Product Manager, Jira Server and Data Center
Feedback Policy:

We collect Jira feedback from various sources, and we evaluate what we've collected when planning our product roadmap. To understand how this piece of feedback will be reviewed, see our Implementation of New Features Policy.

Description

Problem Definition

Current embedded JRE has some vulnerabilities which have been resolved in critical security update Java 1.8.0.171. Many larger companies which have a dedicated security team will ask their JIRA system admin to update the Java version to the new critical security update. Which forces the JIRA system admin to sway away from sticking to the embedded version.

https://www.java.com/en/download/faq/release_changes.xml

Workaround

If the customer is requested to update Java before a new JIRA release with the required java update comes out, they can update their Java versions manually by following these KB articles;

Attachments

Issue Links

is duplicated by

JRASERVER-67824 Update JDK for Enterprise release to get fix for JDK-8144566: 'Custom HostnameVerifier disables SNI extension'

Closed

relates to

JRASERVER-65102 Update bundled Apache Tomcat due to security vulnerabilities

Closed

CONFSERVER-54108 Embed latest java critical security update (1.8.0.161 or higher) into the next Confluence (sub)version

Closed

RAID-908 Loading...

is related to: BDEV-14523 Loading...

mentioned in: Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...

(6 mentioned in)

Activity

People

Assignee:: ΞΔ (Inactive)

Reporter:: Steven de Groot

Votes:: 7 Vote for this issue

Watchers:: 18 Start watching this issue

Dates

Due:: 10/Sep/2018

Created:: 31/Oct/2017 12:10 PM

Updated:: 22/Dec/2023 3:20 PM

Resolved:: 24/Aug/2018 11:52 AM

Embed latest java critical security update (1.8.0.171 or higher) into the next JIRA (sub)version