Purpose

Instructions for patching Hipchat Server for CVE-2017-14585.

Compatibility

This patch can only be applied to Hipchat Server versions 2.2.4 and 2.2.5.

For all other versions, please back up Hipchat Server then upgrade to the latest version.

Solution

To patch Hipchat Server:

1. Log into the Hipchat Server terminal/command-line interface

2. Download the patch

   wget https://s3.amazonaws.com/hipchat-server-stable/utils/CVE-2017-14585.tar.gz

3. Decompress the contents

   tar xzf CVE-2017-14585.tar.gz

4. Change to the patch directory

   cd CVE-2017-14585

5. Run install.sh

   /bin/bash install.sh