Hi there,

We recently completed an upgrade of our production environment to JIRA 5.1.5. One of our security analysts has run a vulnerability scan on our new server and has identified a risk due to older an version of java runtime (5.1.5 is bundled with jre version 1.6.0_26) He would like for us to upgrade the jre to 6 update 37 to address various security issues.

Can you please advise what risk does this involve? Would you recommend rigorous testing for this type of change to our JIRA environment?

If we are running JIRA as a windows service do we just need to point the relevant key in the registry to the new jvm.dll or is extra configuration required?

eg:

Windows Registry Editor Version 5.00

HKEY_LOCAL_MACHINE SOFTWARE Wow6432Node Apache Software Foundation Procrun 2.0 JIRA Parameters Java

Jvm=D: Atlassian JIRA jre bin server jvm.dll

Thanks,

Ben

1 answer

This widget could not be displayed.

Try this on Windows: https://confluence.atlassian.com/display/JIRAKB/Configuring+JIRA+Service+to+Run+on+a+Different+JVM

On Ubuntu Linux the following seems to work:

I created a script in /etc/profile.d to cover both scenarios as well as make this work based on whatever is setup by update-alternatives for java in Ubuntu (script is called /etc/profile.d/setjavahome.sh):

export JRE_HOME=$(dirname $(dirname $(readlink -f /usr/bin/java)))
export JAVA_HOME=$JRE_HOME

Suggest an answer

Log in or Sign up to answer
Atlassian Summit 2018

Meet the community IRL

Atlassian Summit is an excellent opportunity for in-person support, training, and networking.

Learn more
Community showcase
Posted yesterday in Teamwork

What teamwork quotes inspire you?

Hey everyone! My name is Natalie and I'm an editor of the Atlassian Blog and I've got a question for you: What's your favorite quote about teamwork?  We've compiled a list here, along with...

103 views 14 7
Join discussion

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you