Atlassian Releases Security Updates for Multiple Products (heise.de)

• Patches available for Bamboo, Bitbucket, Confluence, Crowd, Fisheye, Jira, JSM, and Sourcetree.
• Critical RCE flaws in third-party components, mitigated by implementation.
• No active exploitation known; timely patching recommended.

"Atlassian has released security updates for Bamboo, Bitbucket, Confluence, Crowd, Fisheye/Crucible, Jira, Jira Service Management, and Sourcetree. The patches address multiple critical and high-severity vulnerabilities that could allow remote code execution, denial-of-service, authentication bypass, or unauthorized information disclosure. No active exploitation has been reported. Administrators are advised to apply updates promptly."