JIRA 4.1.2 Release Notes

18 June 2010

The Atlassian JIRA team is proud to announce the release of JIRA 4.1.2. This point release is a highly recommended upgrade as it contains important fixes to security vulnerabilities — please refer to the JIRA Security Advisory 2010-06-18 for details.

This point release also contains over 40 fixes and improvements, notably including:

  • New 'Comment' button — You can now add comments via a 'Comment' button at the end of the 'View Issue' page. Clicking this button opens a large text box immediately below the last comment, into which you can add your new comment. This function is useful when you want to reply to recently added comments. For more information, please refer to Commenting on an Issue.

  • 'HttpOnly' Session Cookies — To improve the security of JIRA, JIRA standalone distributions (version 4.1.2 and later) now implement 'HttpOnly' session ID cookies, as indicated in our Security Advisory. Please refer to our Preventing Security Attacks guide for details on implementing 'HttpOnly' session ID cookes for JIRA EAR-WAR distributions.

Please also note that the bundled FishEye plugin and Bamboo plugin have been updated with security improvements, which are also mentioned in our Security Advisory.

JIRA 4.1.2 is of course free to all customers with active JIRA software maintenance.

Don't have JIRA 4.1 yet?
Take a look at all the new features in the JIRA 4.1 Release Notes and see what you are missing out on!

Upgrading from a Previous Version of JIRA

If you are upgrading, please read the JIRA 4.1.2 Upgrade Guide.

Updates and Fixes in this Release

JIRA 4.1.2 includes the following updates and bug fixes:

T Key Summary P Status
Bug JRA-21624 Set of critical security vulnerabilities High Resolved
Bug JRA-21322 Attach Screenshot applet no longer works in 4.1.2 High Resolved
Bug JRA-21208 Tomcat supportability on Supporte Platform page needs to be fixed High Closed
Bug JRA-20964 Upgrade Link in 4.1 Installer is Broken High Resolved
Bug JRA-20963 SSL connector in server.xml incorrect for JIRA 4.1 Standalone High Resolved
Bug JRA-20940 JIRA Activity Stream gadget is broken when accessed externally using IE High Resolved
Bug JRA-20528 Workflow plugin modules defined in V2 plugins will sometimes not work High Resolved
Bug JRA-19851 Cannot authorise "Created vs Resolved Chart" gadget in Confluence High Resolved
Bug JRA-21397 View issue layout broken by wiki markup in comments - people and dates box shown in footer Medium Resolved
Bug JRA-21192 JIRA config tool does not like "escaped colons" in the jira-application.properties file Medium Resolved
Bug JRA-21190 Broken links in the Windows Installer Medium Resolved
Bug JRA-20917 Sperious Warnings Displayed at Start-up Medium Resolved
Bug JRA-20776 New comment UI is difficult to use when replying Medium Resolved
Bug JRA-20675 Can't vote for issues in JIRA 4.1-rc1 Medium Resolved
Bug JRA-20578 Shared filter queries break when users don't have browse permissions for projects in the search query Medium Resolved
Bug JRA-20554 Some operations fail with "ERROR: operator does not exist" when JIRA is connected to Postgres 8.3+ Medium Resolved
Bug JRA-20417 JIRA Activity Stream gadget displays error in Confluence due to en_GB / en_UK mismatch Medium Resolved
Bug JRA-20235 Attach screenshot link doesn't work if group name includes " Medium Resolved
Bug JRA-20018 Non-standard HTML is generated when embedding flash movies Medium Resolved
Bug JRA-19733 Recently Created Issues Chart is no longer clickable and doesn't show hover information Medium Resolved
Showing 20 out of 42 issues Refresh

Was this helpful?

Thanks for your feedback!

Why was this unhelpful?

Have a question about this article?

See questions about this article

Powered by Confluence and Scroll Viewport