JIRA 4.1.2 Release Notes

18 June 2010

The Atlassian JIRA team is proud to announce the release of JIRA 4.1.2. This point release is a highly recommended upgrade as it contains important fixes to security vulnerabilities — please refer to the JIRA Security Advisory 2010-06-18 for details.

This point release also contains over 40 fixes and improvements, notably including:

• New 'Comment' button — You can now add comments via a 'Comment' button at the end of the 'View Issue' page. Clicking this button opens a large text box immediately below the last comment, into which you can add your new comment. This function is useful when you want to reply to recently added comments. For more information, please refer to Commenting on an Issue.
  
  
• 'HttpOnly' Session Cookies — To improve the security of JIRA, JIRA standalone distributions (version 4.1.2 and later) now implement 'HttpOnly' session ID cookies, as indicated in our Security Advisory. Please refer to our Preventing Security Attacks guide for details on implementing 'HttpOnly' session ID cookes for JIRA EAR-WAR distributions.

Please also note that the bundled FishEye plugin and Bamboo plugin have been updated with security improvements, which are also mentioned in our Security Advisory.

JIRA 4.1.2 is of course free to all customers with active JIRA software maintenance.

Don't have JIRA 4.1 yet?
Take a look at all the new features in the JIRA 4.1 Release Notes and see what you are missing out on!

Upgrading from a Previous Version of JIRA

If you are upgrading, please read the JIRA 4.1.2 Upgrade Guide.

Updates and Fixes in this Release

JIRA 4.1.2 includes the following updates and bug fixes: