Security Bulletin 01/2025 investigating

Incident Report for Communardo Service Center

Resolved

Dear customers,

after a thorough analysis, we recommend installing a minor update to the affected systems Jira (Software & Service Management), Confluence and Bitbucket and consider the Update for Crowd to be optional.
We assessed the risk for Jira, Confluence and Bitbucket as "medium," and for Crowd as "low to medium."

You can find all the information regarding the fixed versions for your system in the post: https://confluence.atlassian.com/security/security-bulletin-january-21-2025-1489803942.html

Additional information:
Crowd: Only 6.0.4, 6.0.5 and 6.1.2 are affected
Jira: The fixed version of Jira was released some time ago and has already been applied to many systems.

As mentioned, if we are hosting your systems or proactively update your applications, we will directly communicate any information via the opened ticket in our service center.

In case you have additional questions, please open a request in our Communardo Service Center:
https://communardo.atlassian.net/servicedesk/customer/portal/6

Best regards,
Your Communardo Team
Posted Jan 22, 2025 - 13:53 CET

Investigating

Dear customers,

we are currently evaluating Atlassian's latest Security Bulletin:
https://confluence.atlassian.com/security/security-bulletin-january-21-2025-1489803942.html

Affected Applications:
Bitbucket, Confluence, Crowd, Jira Software, Jira Service Management

We will update this post as soon as we have finalized the analysis.

If we are hosting your systems or if we proactively update your applications, we have already opened a ticket for you in our service center. You may refer to the ticket for further information as soon as we got any news.

In case you have additional questions, please open a request in our Communardo Service Center:
https://communardo.atlassian.net/servicedesk/customer/portal/6

Best Regards,
Your Communardo Team
Posted Jan 21, 2025 - 20:01 CET
This incident affected: Atlassian-Security (Security Status Bitbucket, Security Status Confluence, Security Status Crowd, Security Status Jira).