Jira Core 8.14.x upgrade notes

Jira Core release notes

On this page

Still need help?

The Atlassian Community is here for you.

Ask the community

Here are some important notes on upgrading to Jira Core 8.14.

For details on the new features and improvements in this release, see the Jira Core 8.14.x release notes


 Upgrade notes

Changes in startup files

We've changed several startup files to change the format of GC logs produced by Jira while running with Java 11. Without the change, the logs are impossible to parse with the GCViewer tool and can be frustrating for an admin to work with. 

We've changed the time,uptime to tags,time,uptime,level in the following files:

  • bin/set-gc-params.sh file on Linux
  • bin/set-gc-params.bat file on Windows
  • bin/set-gc-params-service.bat file on Windows

If you don't have any custom changes in those files, you don't need to take any cation. If you do, you'll need to copy your changes to the new files on upgrade.

Change in logging in with passing credentials in URL parameters

We're blocking the default possibility to log into Jira by passing credentials via URL parameters. For details, see  JRASERVER-38548 - Getting issue details... STATUS

Deprecated method

This method of authentication has been deprecated since Jira 8.0 (11 Feb 2019). For details, see  JRASERVER-67979 - Getting issue details... STATUS

Reason

Since the credentials might end up as a plain text entry in different log files (such as that of load balancers or proxies), this method poses a security risk. To mitigate it, we want to block its default availability, and make it an option only in special cases. We’ll also sanitize the access logs of the Tomcat web server bundled with Jira.

However, for the internal and legacy integrations to keep working, we still want to provide a way to use this method. You’ll have to set the special system property atlassian.allow.insecure.url.parameter.login to trueThat way your legacy and/or internal integrations will still work. To keep your logs under control, it’s also a good idea to review your logs for possible credential entries.

 End of support announcements

There are no changes in this release. For details on what's supported, see Supported platforms.

 App developers

See Preparing for Jira 8.14 for any important changes regarding apps.

 Upgrade procedure

Upgrading from a Jira version 8.x.x? 

See  Upgrading Jira applications  for complete upgrade procedures, including all available upgrade methods and pre-upgrade steps.

Last modified on Nov 20, 2020

Was this helpful?

Yes
No
Provide feedback about this article
Powered by Confluence and Scroll Viewport.