Uploaded image for project: 'OFBiz'
  1. OFBiz
  2. OFBIZ-9391

Update Apache Solr/Lucene to release 6.6.0

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Minor
    • Resolution: Implemented
    • Affects Version/s: Trunk
    • Fix Version/s: Upcoming Release
    • Component/s: solr
    • Labels:
      None

      Description

      There are new Solr/Lucene versions 6.6.0 available, see https://lucene.apache.org/core/6_6_0/changes/Changes.html and https://lucene.apache.org/solr/6_6_0/changes/Changes.html.

      This Jira takes care of the update.

        Issue Links

          Activity

          Hide
          jacques.le.roux Jacques Le Roux added a comment -

          There is one good reason to update Solr to 6.6: SOLR-10624, quoting:

          Security Vulnerability in secure inter-node communication in Apache Solr

          Despite OFBiz OOTB does not use Solr inter-node communication better to update Solr to fix this possible issue in custom projects.

          Show
          jacques.le.roux Jacques Le Roux added a comment - There is one good reason to update Solr to 6.6: SOLR-10624 , quoting: Security Vulnerability in secure inter-node communication in Apache Solr Despite OFBiz OOTB does not use Solr inter-node communication better to update Solr to fix this possible issue in custom projects.
          Hide
          mbrohl Michael Brohl added a comment -

          Yes, I'm working on it but get stuck when I stumbled upon the data/test issues in OFBIZ-9440.
          Will continue soon.

          Show
          mbrohl Michael Brohl added a comment - Yes, I'm working on it but get stuck when I stumbled upon the data/test issues in OFBIZ-9440 . Will continue soon.
          Hide
          jacques.le.roux Jacques Le Roux added a comment -

          Hi Michael,

          There is really no hurry for OFBiz itself. OFBiz customers using multi-node should be aware of their own security. That's where most of Solr important security issues happen

          Show
          jacques.le.roux Jacques Le Roux added a comment - Hi Michael, There is really no hurry for OFBiz itself. OFBiz customers using multi-node should be aware of their own security. That's where most of Solr important security issues happen
          Hide
          mbrohl Michael Brohl added a comment - - edited

          This is still blocked by the Guava dependency problem. Any help from the Gradle specialists is appreciated

          Show
          mbrohl Michael Brohl added a comment - - edited This is still blocked by the Guava dependency problem. Any help from the Gradle specialists is appreciated
          Hide
          jacques.le.roux Jacques Le Roux added a comment -

          Hi Michael,

          Any help from the Cradle specialists is appreciated

          I guess you mean Gradle?

          Show
          jacques.le.roux Jacques Le Roux added a comment - Hi Michael, Any help from the Cradle specialists is appreciated I guess you mean Gradle?
          Hide
          Renuka_Srishti Renuka Srishti added a comment -

          Hii Michael,
          I think the comment in OFBIZ-9444 will help you.

          Show
          Renuka_Srishti Renuka Srishti added a comment - Hii Michael, I think the comment in OFBIZ-9444 will help you.
          Hide
          mbrohl Michael Brohl added a comment -

          Sure, Jacques. It seems that Safari's auto correction substitutes Gradle -> Cradle, found the same in another issue.

          Show
          mbrohl Michael Brohl added a comment - Sure, Jacques. It seems that Safari's auto correction substitutes Gradle -> Cradle, found the same in another issue.
          Hide
          jacques.le.roux Jacques Le Roux added a comment -

          Yep Michael, saw it already elsewhere indeed

          Show
          jacques.le.roux Jacques Le Roux added a comment - Yep Michael, saw it already elsewhere indeed
          Hide
          mbrohl Michael Brohl added a comment -

          This is implemented with r1811688.

          Show
          mbrohl Michael Brohl added a comment - This is implemented with r1811688.

            People

            • Assignee:
              mbrohl Michael Brohl
              Reporter:
              mbrohl Michael Brohl
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development