WRIGHT-PATTERSON AFB, Ohio -- The Business and Enterprise Systems (BES) Atlassian Toolset (BAT) successfully deployed a maintenance patch and an emergency patch on Jan. 23 and Jan. 24, 2025.
Maintenance Patch:
- Originally scheduled for deployment on Dec. 5, 2024, but postponed to resolved Jira installation and plug-in compatibility issues.
- Updated all four Atlassian components.
- Updated 30 of 31 plug-ins.
- Updated Keycloak, an open-source identity and access management tool.
- Resolved 14 outstanding Information Assurance Vulnerability Management (IAVM) processes:
- Two IAVM processes resolved prior to deployment.
- Resolved six miscellaneous requirements (e.g. License Keys, User-reported issues, etc.).
- Introduction of BAT "Maintenance Mode" during deployments (locks out users during deployment).
Emergency Patch:
- Issues with both Jira and Confluence components were encountered by BAT users and administrators following the Jan. 23, 2025, main update.
- Jira: A bug was detected that was preventing Open Authorization functionality and associated email capabilities. This bug was verified with Atlassian, and the recourse was to update Jira/Jira Service Management (JSM) or rollback to the previous version. The BAT team decided to update Jira/JSM from v10.1.2 to v10.3.2 which also required us to update seven Jira plug-ins.
- Confluence: Multiple issues were encountered by users (e.g. editing, restrictions, directory services, etc.). Atlassian was unable to validate a bug, but suggested flushing Akamai/Content Delivery Network (CDN) caches and we put in a ticket with Cloud One to execute that action. The cache flush resolved the Confluence issues.
- Updated two Atlassian components.
- Updated seven Jira plug-ins.
- Flushed Akamai/CDN caches.
- Update completed in BAT/Testing Environment and subsequently in BAT/Production Environment in less than two hours.
Deploying the maintenance and emergency patch in January, the BES Services Management Division (GBQ), continues to improve system stability and enhance cyber security.
GBQ values the trust its customers have placed in it, reflecting its proactive approach to identifying and mitigating potential vulnerabilities while staying up to date with the latest software patches.