Maintaing Jira installations on Windows


I have a question regarding the windows installation. I plan to use JIRA in an environment where I have to take care a bit more about security. During the installation of JIRA I identified three components on the server which I have to take care of. First the JRE and second the tomcat and last but not least JIRA itself. I'm just talking about security vulnerabilities here. I read that the best way to keep JIRA up to date is the rapid upgrade method. This method includes besides JIRA itself the JRE and Tomcat. The question I have is how fast are new versions available when there are new releases of the JRE and Tomcat? On a Linux server I think I would take care of them separately by my self but as I understand the rapid upgrade method correctly I do not have this option on a Windows installation. 

Please don't ask me why I'm going to install JIRA on a Windows machine. Its a customer requirement. 

Are there any best practices for maintaining security releases for each of the products?

Thank you for your answers.




1 answer

1 accepted

0 votes
Accepted answer

Atlassian tend to package them together and they don't alter releases.  So if JIRA x.y.z comes with Tomcat 7.1.4 and JRE 1.8_02, that's not going to change even if there are security issues with any component.  The version of Tomcat and JRE can change on any release though, so it may be that JIRA x.y.z+1 uses a later Tomcat/JRE.  

But those releases do NOT drive Atlassian releases.  Atlassian fixes are what drives the z part of the release and improvements the y.  They've been known to keep running with quite old Tomcats, even in later releases.

Thank you for your answer, Nic!

Suggest an answer

Log in or Sign up to answer
Community showcase
Published Jan 08, 2019 in Jira

How to Jira for designers

I’m a designer on the Jira team. For a long time, I’ve fielded questions from other designers about how they should be using Jira Software with their design team. I’ve also heard feedback from other ...

1,036 views 4 9
Read article

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you