How can I update log4j libraries? Jira 6.0.7

Question

Hello everyone.

I need to update the version of log4j that is being used in my company's Jira as we noticed that the version of the packages being used has security flaws.
The versions I have of log4j are 1.2.15 and 1.2.16.

Does anyone know how I can update these libraries?

Thank you very much.

Dirk Ronsmans · Answer

If they asked you to enter a url, most likely you chose Cloud as your hosting option.

For a selfhosted version you should just need to enter your SEN/entitlement id and leave the url empty if it is there by default

Alejandro Sarmiento · Answer

Hi Dirk.
Thank you very much for your reply.

I tried to contact support but when they ask me to enter the url in the form they don't give it as valid and won't allow me to proceed.
Jira is deployed on our own servers and is only accessible from the company's own vpn so it is possible that this is the problem with the form validation.
Do you know any email that I can write to them?

Again, thank you very much.

Dirk Ronsmans · Answer

Hi @Alejandro Sarmiento  and welcome to the community!

If you suspect the versions that are bundled with your Jira instance have security flaws I would suggest to raise a support ticket with Atlassian directly.

You can do that thru https://support.atlassian.com/contact and have them assist you