Docker Images For Fisheye/Crucible Are Out of Date

[Kalvin Gühring]

Good day,

After receiving the vulnerability notification this morning I went to update our Atlassian products to find that crucible docker images are no longer being updated from versions 4.8.6. Is it possible to get the official images updated to the fixed version 4.8.8 mentioned in this article: 

https://confluence.atlassian.com/security/multiple-products-security-advisory-unrendered-unicode-bidirectional-override-characters-cve-2021-42574-1086419475.html

Kind regards,

Kalvin G.

[Daniel Eads · Accepted solution]

Hi @Kalvin Gühring ,

We pushed 4.8.8 to Docker hub a couple days ago - just wanted to make sure you saw. Running docker pull atlassian/crucible:latest will currently pull the 4.8.8 ubuntu image.

Cheers,
Daniel | Atlassian Support

[Kalvin Gühring]

Hi @Daniel Eads 

I had not seen the updates so thanks for checking in with me. I have updated and all looks good. 

Thanks,
Kalvin G.