Important Security Patch for JIRA versions 3.7.x & 3.8.x

Please find attached an important security patch for JIRA 3.7.x and 3.8.x

If you are using Project Roles and have Issue Security schemes that use Project Roles and you cannot upgrade to 3.9.1 then you must install this patch.

Installation Instructions.

If you are using JIRA Standalone please do the following:

1. Download the attached patch zip file
2. Extract the contained files to <jira_install_dir>/atlassian-jira/WEB-INF/classes/ overwriting the files there
3. Restart JIRA

If you are using the WAR distribution of JIRA:

1. Download the attached patch zip file
2. Extract the contained files to <jira_install_dir>/atlassian-jira/WEB-INF/classes/ overwriting the files there
3. Run 'build.sh clean' on unix or 'build.bat clean' on windows
4. Run 'build.sh' on unix or 'build.bat' on windows
5. Redeploy the JIRA web app into your application server
6. Restart the application server