Atlassian has released a bulletin with vulnerabilities and CVEs affecting multiple products. Please keep in mind that the issues included in this bulletin are a result of our increase in scope of vulnerability disclosure. While this change results in an increase
of visibility and disclosures, it does not mean there are more vulnerabilities. Rather, that we are taking a more proactive approach to vulnerability transparency and are committed to providing our customers with the information they need to make informed
decisions about updating our products. Unlike a critical security advisory, we are not calling for immediate action to be taken from the bulletin. Generally, customers can keep to their existing upgrade schedule unless their own assessment or processes dictate
otherwise.
|