CVE-2019-1158 is resolved in jira 8.5?

Question

Hi,

I'm asking after looking at the guide below, can I say that the security issue has been solved in jira 8.5? Is the upper version resolved from Jira 8.3?

https://community.atlassian.com/t5/Jira-articles/CVE-2019-11581-Critical-Security-Advisory-for-Jira-Server-and/ba-p/1128241

Thanks in advance

Nic Brough -Adaptavist- · Accepted Answer

Think of it this way - why would a later version deliberately remove a critical security fix?

Apologies if that sounds a bit snarky, but it was the shortest way to put it without a boring essay question.  Every version after the ones Atlassian say fixes were released in should incorporate the fix, as they're based on the fixed versions.  The fixes might eventually be removed, but only when they're no longer needed!