Security alert for Atlassian products

[shailesh kumar]

Dear Team,

I got this below security alert. Kindly let me know how can i fix this security bug.

Atlassian
http://click.mailer.atlassian.com/?ju=fdf51572766507757c107670&ls=fdf01270756c0c747515767c&m=fec2157377620c74&l=fe9915707d65067577&s=fe211d7277600575771d79&jb=ffcf14&t= 

Security advisory for
Confluence, Bamboo, FishEye, Crucible, and Crowd


Hello,

We are writing to inform you of critical security vulnerabilities that affects all supported versions of Confluence up to and including 5.5, Bamboo up to and including 5.5,FishEye from 3.0 up to and including 3.4,Crucible from 3.0 up to and including 3.4, and Crowd up to and including 2.7.

How do you fix it?
Atlassian OnDemand  customers have been upgraded with the fix for the issue described in this advisory.
Customers who have downloaded and installed Atlassian products, follow the instructions provided in the detailed security advisories:

Confluence Security Advisory - 
http://click.mailer.atlassian.com/?ju=fdfa1572766507757c117575&ls=fdf01270756c0c747515767c&m=fec2157377620c74&l=fe9915707d65067577&s=fe211d7277600575771d79&jb=ffcf14&t= 

Bamboo Security Advisory - 
http://click.mailer.atlassian.com/?ju=fdf91572766507757c117574&ls=fdf01270756c0c747515767c&m=fec2157377620c74&l=fe9915707d65067577&s=fe211d7277600575771d79&jb=ffcf14&t= 

FishEye Security Advisory - 
http://click.mailer.atlassian.com/?ju=fdf81572766507757c117577&ls=fdf01270756c0c747515767c&m=fec2157377620c74&l=fe9915707d65067577&s=fe211d7277600575771d79&jb=ffcf14&t= 
 
Crucible Security Advisory - 
http://click.mailer.atlassian.com/?ju=fdf71572766507757c117576&ls=fdf01270756c0c747515767c&m=fec2157377620c74&l=fe9915707d65067577&s=fe211d7277600575771d79&jb=ffcf14&t= 

Crowd Security Advisory - 
http://click.mailer.atlassian.com/?ju=fdf61572766507757c117571&ls=fdf01270756c0c747515767c&m=fec2157377620c74&l=fe9915707d65067577&s=fe211d7277600575771d79&jb=ffcf14&t= 


If you have questions or concerns, please raise a support request. One of our support engineers will be happy to help you.
http://click.mailer.atlassian.com/?ju=fdf71572766507757c107777&ls=fdf01270756c0c747515767c&m=fec2157377620c74&l=fe9915707d65067577&s=fe211d7277600575771d79&jb=ffcf14&t= 

Kind regards,

Atlassian



This very important email was sent by Atlassian, to keep you informed about changes to your products or accounts.


Copyright 2014 Atlassian Pty Ltd. All rights reserved.
We are located at 341 George Street, Sydney, NSW,
2000,
Australia and here is our Privacy Policy.
http://click.mailer.atlassian.com/?ju=fdf41572766507757c107871&ls=fdf01270756c0c747515767c&m=fec2157377620c74&l=fe9915707d65067577&s=fe211d7277600575771d79&jb=ffcf14&t= 

.........................................................................................

Thanks

Shailesh Kumar

Mo +91 9717804346

[Andre Lehmann]

I don't know what do you want?

There is a critical Security-Bug. Atlassian got a Fix.

If your are using one of the products listed above, you have to either update your product or install the patch.

For every affected product is a seperated documentation-page on how to install the patch.

Furthermore in that mail:
"If you have questions or concerns, please raise a support request. One of our support engineers will be happy to help you."

So what do you exactly want to know?

Kind regards
André

[Mirek]

I suppose that this was a support ticket. I remember that if you create a ticket there is an option to create a new Question on Atlassian Answers. Maybe this is how it was created.

However by only reading this maile there is "How do you fix it?" section which is describing all the details related to every affected application, so asking how to fix it is not a good question...

[Nic Brough -Adaptavist-]

I always wonder about the mind-set of people who do things like this. They get an email saying "there's a possible problem, here is how to fix it", so they ask a question instead of reading it.

Fair enough if they have questions about the instructions, but not bothering to read it in the first place, honestly <shakes head in despair>

Heck, even I RTFM when I get stuck before asking for help.

[AafrinA]

Hi Shailesh Kumar,

Please follow the instruction given on Security Advisory of the particular product to know more about fixing and patching the bugs.