-
Bug
-
Resolution: Won't Fix
-
Medium (View bug fix roadmap)
-
None
-
9.12.0, 9.4.13, 10.2.0, 10.3.0
-
9.04
-
21
-
Severity 3 - Minor
-
78
-
-
Issue Summary
This is reproducible on Data Center: yes
When performing the upgrade from Jira Software 9.4.12 or below to Jira Software 9.4.13+, users see the querydsl-4.0.7-provider-plugin plugin under the User-installed add-ons.
In Jira Software 9.4.12 and below, the querydsl-4.0.7-provider-plugin was shipped with Jira as a dependent plugin of the Advanced Roadmaps add-on.
In Jira Software 9.4.13+, the querydsl plugin was updated to the querydsl-4.1.4-provider-plugin version leaving the querydsl-4.0.7-provider-plugin as well.
Starting from Jira Software 10.2.0, the querydsl plugins are no longer bundled with Jira Software as separate plugins. Instead, Jira Software now relies on the QueryDSL bundle provided by Jira Core.
As a result:
- Both the querydsl-4.0.7-provider-plugin and querydsl-4.1.4-provider-plugin may still appear under the Application Components or User-installed add-ons after an upgrade.
- These plugins are no longer required for Jira Software and can be safely uninstalled.
- The newer QueryDSL libraries (querydsl-core-5.1.0.jar and querydsl-sql-5.1.0.jar) are now located in WEB-INF/lib and are no longer visible in the Application Components or System Apps section in Jira’s UI.
Steps to Reproduce
- Install Jira Software 9.4.12 or below with no data or plugins
- Perform the upgrade to Jira Software 9.4.13+
- Navigate to Jira Adminsitration > Manage apps> Manage apps
Expected Results
The querydsl-4.0.7-provider-plugin will not be displayed in the User-installed add-on section.
Actual Results
The querydsl-4.0.7-provider-plugin is displayed as a User-installed add-on.
If upgrading to Jira 10.2.0 or higher, querydsl-4.1.4-provider-plugin might also be displayed as a User-installed add-on.
Workaround
Uninstall querydsl-4.0.7-provider-plugin in the Manage apps UI page (<jira_url>/plugins/servlet/upm/manage/all).
For Jira Software 10.2.0 and higher, you can also uninstall the querydsl-4.1.4-provider-plugin since Jira Software now relies on the QueryDSL bundle provided by Jira Core.
NOTE: Jira should make use of the most recent version of any plugin, and ignore all others
- is caused by
-
JSWSERVER-25415 Info Disclosure com.google.guava:guava in Jira Software Data Center and Server
-
- Published
-
Old version of the querydsl plugin appear in User Installed Add-Ons in Jira Software
-
Bug
-
Resolution: Won't Fix
-
Medium
-
None
-
9.12.0, 9.4.13, 10.2.0, 10.3.0
-
9.04
-
21
-
Severity 3 - Minor
-
78
-
-
Issue Summary
This is reproducible on Data Center: yes
When performing the upgrade from Jira Software 9.4.12 or below to Jira Software 9.4.13+, users see the querydsl-4.0.7-provider-plugin plugin under the User-installed add-ons.
In Jira Software 9.4.12 and below, the querydsl-4.0.7-provider-plugin was shipped with Jira as a dependent plugin of the Advanced Roadmaps add-on.
In Jira Software 9.4.13+, the querydsl plugin was updated to the querydsl-4.1.4-provider-plugin version leaving the querydsl-4.0.7-provider-plugin as well.
Starting from Jira Software 10.2.0, the querydsl plugins are no longer bundled with Jira Software as separate plugins. Instead, Jira Software now relies on the QueryDSL bundle provided by Jira Core.
As a result:
- Both the querydsl-4.0.7-provider-plugin and querydsl-4.1.4-provider-plugin may still appear under the Application Components or User-installed add-ons after an upgrade.
- These plugins are no longer required for Jira Software and can be safely uninstalled.
- The newer QueryDSL libraries (querydsl-core-5.1.0.jar and querydsl-sql-5.1.0.jar) are now located in WEB-INF/lib and are no longer visible in the Application Components or System Apps section in Jira’s UI.
Steps to Reproduce
- Install Jira Software 9.4.12 or below with no data or plugins
- Perform the upgrade to Jira Software 9.4.13+
- Navigate to Jira Adminsitration > Manage apps> Manage apps
Expected Results
The querydsl-4.0.7-provider-plugin will not be displayed in the User-installed add-on section.
Actual Results
The querydsl-4.0.7-provider-plugin is displayed as a User-installed add-on.
If upgrading to Jira 10.2.0 or higher, querydsl-4.1.4-provider-plugin might also be displayed as a User-installed add-on.
Workaround
Uninstall querydsl-4.0.7-provider-plugin in the Manage apps UI page (<jira_url>/plugins/servlet/upm/manage/all).
For Jira Software 10.2.0 and higher, you can also uninstall the querydsl-4.1.4-provider-plugin since Jira Software now relies on the QueryDSL bundle provided by Jira Core.
NOTE: Jira should make use of the most recent version of any plugin, and ignore all others
- is caused by
-
JSWSERVER-25415 Info Disclosure com.google.guava:guava in Jira Software Data Center and Server
-
- Published
-