How to upgrade confluence

Question

Hello,

we need to to upgrade our Confluence from actual version , 7.2.1 , because affected of vulnerability described on CVE-2021-26084 .

We will plane to go to 7.4.11 , because 7.4 is LTS enterprise version . Is it a right choice ?

What's the best procedure to do it ?

Another question is about java embedded , if I want to update it, what can I do ? During update there is the possibility to install a new version of java ?

Thanks

Regards

Morris

Marco Olivieri · Answer

Hello,

we chose to go 7.4.11 because it's a LTS version and because during pre-check we noticed that there were less apps to update. We prefered to do short step because it's our first update. Update went well, our confluence it's OK to 7.4.11 version.

However, after update, immediately Confluence didn't run. We did some check but on the logs there weren't error and on the log we didn't find row "Started " about process.

From subsequent checkswe noticed on the home directory (/var/atlassian/application-data/ ) a directory recovery where we found a xml file, upgradeRecoveryFile-8401-8402-before that was updating . After about an hour and a half this step finished and confluence went ok . This step is not described in the documentation, It should be specified that the update procedure does not end after executing the binary.

Java is Adopt JDK 11 , confluence run ok with it.

Mohit Dhir_mwp0zn · Answer

Hi,

Why not considering going to 7.13.0, it is the latest LTS version and you will get few apps built in like confluence calendar, Analytics capability and personal token as well

Please read through the release and upgrade notes for each sub major number change and decide if you have to do it in 2 shots ( upgrade to an intermediate and then upgrade to 7.13 or directly you can do that.

Usually LTS versions are right choice if you are not eager for all the latest changes. Upgrading LTS minor versions usually  does not break tings ( but always take backup and test it )

Regarding Java, There are certain things comes with the library so you dont have to explicitly change any thing however there has been changes in the support and changes in the java providers which you should go through in the release notes.