Security Advisory

[Darren Zamrykut]

We received security advisory for Jira Service Management Data Center today.  We currently have Jira 8.13.3 and Jira Service Management 4.13 installed.  Does this advisory apply to these versions?  Looks like I can upgrade to 8.20.0 LTS if that is the case.

[Joseph Chung Yin]

@Darren Zamrykut -

Based on the advisory and your current JSM version, Insight is still a separate add-on (user installed) and not a part of the system components of JSM.

See extract...

Insight - Asset Management app

For:

• Jira Service Management Data Center versions prior to version 4.15.0,

• Jira Core (Server/Data Center),

• Jira Software (Server/Data Center),

upgrade the Insight - Asset Management app to version 8.9.3 (which disables the connection to any H2 DB) by downloading it from the Atlassian Marketplace.

So, it seems that you just need to down load the Insight add-on for your env.  I would still recommend you to reach out to Atlassian Support Team directly and confirm.

Hope this helpls.

Best, Joseph