Security Bulletin - July 16 2024
July 2024 Security Bulletin
This Security Bulletin includes 11 high-severity vulnerabilities which have been addressed in the noted Fixed Versions released in the past month. These vulnerabilities were discovered via our Bug Bounty program, pen-testing processes, and third-party library scans.
To fix all of the vulnerabilities impacting your product(s), Atlassian recommends patching your instances to the latest version or one of the Fixed Versions. The listed Fixed Versions for each product are current as of July 16, 2024 (date of publication); visit the linked product Release Notes for the most up-to-date versions.
NOTE: The vulnerabilities included in monthly Security Bulletins present a lower impact than those published via Critical Security Advisories. Customers can expect to receive those high-priority patches outside of our monthly schedule as necessary.
To search for CVEs or check your product versions for disclosed vulnerabilities, check the Vulnerability Disclosure Portal.
Frequently Asked Questions:
Why is my Feature Version not listed in a Fixed Version? You may be using an unsupported version and need to patch to the latest version or Long-Term Support (LTS) version.
- What are the most up-to-date Data Center product versions? You can always check the software download portal or visit the product-specific download pages.
I am using an LTS, why is it not listed in the Fixed Versions? Your LTS version may not have been updated yet or a backported fix may not have been feasible. Please see our Security Bug Fix Policy for more information. We recommend upgrading your products to the latest versions. For the latest fixed versions, visit the release notes linked in the vulnerability table.
Questions about the bulletin, have feedback? Let us know! Read more about our bulletins and feel free to contribute feedback on our latest Community Post
To search for CVEs or check your products versions for disclosed vulnerabilities, check the Vulnerability Disclosure Portal.