3.6.5 (Security fix)

The packed SQL+JQL Driver has been upgraded (+9.7.0) to fix a critical vulnerability. Please upgrade the SQL+JQL Driver on Jira ASAP (it might require to upgrade the JDBC driver to access remotely)

3.6.4 (Security fixes)

As a result of deep research to find security vulnerabilities in the app some URLs have been fixed to avoid potential XSRF attacks to Jira administrators. Read more...
In addition, the packed SQL+JQL Driver has been updated to the 9.6.0 version which also fixes critical vulnerabilities in the Driver.

FIX: It was possible to perform an XSS attack from one URL. Credits for Ivan Rumak and Alexey Rumak that reported it via https://detectify.com/. Thank you!

Eclipse BIRT remains 100% free at no cost. But the Driver has a dual license (free and commercial) until Jira 9 when only the commercial version will be supported. This version of Eclipse BIRT upgrades the Driver to the 8.0.2 version (← COMMERCIAL!. If you want to run the free version of the Driver, please downgrade it to the latest 7.x version). Of course, if your BIRT reports do not use the SQL+JQL Driver as a data source you are not impacted by this.

IMPROV: Support for a new WEB location that allows sharing the BIRT report URL and embedding it into an iframe.
IMPROV: New action to run reports from the administrator's report listing.

IMPROV: BIRT Runtime 4.8.0 replaced moved from OpenText to Innovent Solutions. A brief history to understand this change: The Eclipse BIRT project is sponsored by three companies. IBM, Open Text and Innovent Solutions. In early 2015, OpenText acquired Actuate Corporation. Actuate was the leading company developing Eclipse BIRT. Unfortunately, since its acquisition, Open Text made developers' live a lot harder and stopped providing critical parts to integrate BIRT with third-party tools like Jira. Perhaps they thought many developers would stop supporting Eclipse BIRT and this would bring new business opportunities to them. Anyway, we were able to migrate Actuate's BIRT runtime (4.6.0) to OpenText's 4.8.0 versions for Jira which took us a lot of weeks, instead of hours. Fortunately, Innnovent Solutions come to the rescue and published its own version of the Eclipse BIRT Runtime for the 4.8.0 version. Now, we have used the Innovate Solutions version to run Eclipse BIRT on Jira which resolves some bugs too. We expect that replacing the provider of Eclipse BIRT will help to support this app for Jira in the short and long-term.
FIX: Support for Jira 8.5.0
FIX: Some graphs are missing from the reports on Jira.

...

Security fix: only Jira administrators and explicitly granted users and groups can upload BIRT reports. This is a critical security threat and you must upgrade to this version ASAP. Please read more about this Security Thread Alert!Bulletin

Rebranding: after contacting to Eclipse.org, our previous app logo and name was not compliant with the Guidelines for Eclipse Logos and Trademarks. So, we have modified them according their instructions.

...