Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in
It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Atlassian Community Hero Image Collage

Log4J exploit in XRay-Jenkins Plugin

Hello team.

How exposed is the plugin and does it need to be patched?   Our team disabled it to prevent problems over the weekend, but would be great to know if we can re-enable it.

 

Thanks

Chris

2 answers

1 accepted

Hi @Christopher Quon and @Jeff Smith 

The Jenkins plugin has been updated to remove the vulnerability and those updates are now available as follows:
  • Xray for JIRA Jenkins Plugin
    Available on the Jenkins Plugin Manager
    Instructions

 Please check the full information here.

Thank you.

Kind regards,
Rogerio Paiva [Xray Support Team]

Hi Rogerio,

I appreciate the response and letting us know about the update. However, it has come to our attention that there are also log4j vulnerabilities with version 2.16 and that 2.17 is now available. Have you investigated whether or not the plugin needs another log4j update?

Regards,

Jeff

Hi again Rogerio,

I just found my answer here: https://github.com/jenkinsci/xray-connector-plugin/issues/57

The new plugin (2.5.3) was released a few hours ago.

Thanks again,

Jeff

We are also interested in knowing when this will be patched.

 

Jeff Smith

Systems/QA Engineer 

MedImpact Inc

Suggest an answer

Log in or Sign up to answer
TAGS
Community showcase
Published in Apps & Integrations

Send an Email or Publish to Confluence - What should you do with your release notes?

Background When you hear the words ‘Release notes’, almost always you think of an unsolicited email from a software vendor. But I am here to tell you that from our data, sending release notes via E...

135 views 1 2
Read article

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you