Critical Security vulnerability for Jira Service Desk v3.12.2

Question

Hello,

I am using the version 3.12.2 of Jira service desk. I received a mail from Atlassian which inform that a critical security vulnerability exists in Jira Service Desk Server and Data Center for this version. In the link to be followed it is said that an upgrade to the version 3.16.8 fixes the issue.

Is the upgrade the only way to fix the issue?
If yes, can you please give the details of how to proceed with the upgrade?

Thank you in advance,
Best regards,
Bruno.

Bruno Casimir_li07y7 · Answer

Hello Daniel,

The upgrade has been done and it was a success.

Thank you for your help.

Best regards,

Bruno.

Bruno Casimir_li07y7 · Answer

Thank you for the answers Daniel. We will proceed with the upgrade. We will inform you in case we need help.

Best regards,

Bruno.

Daniel Eads · Answer

Hi Bruno,

* Upgrading won't impact when your license is up fro renewal. I wasn't able to find a specific license attached to your Atlassian account, but typically you could check licenses where you are a contact at my.atlassian.com and looking at the expiration date. You can also do this from within Jira by going to the Versions & licenses page and looking at the Maintenance expires date. You're entitled to any versions of Jira released within the maintenance period - so for the latest release of Jira Service Desk, you'll be set as long as the "Maintenance expires" date some date after 16/Sept/19.
* There won't be any changes to the query/filter data. We recommend taking backups of your Jira's install/home directories on your server as well as a database backup, but there aren't extra considerations between the versions you're upgrading against. The full instructions are covered in this upgrade guide.

Cheers,
Daniel