Uploaded image for project: 'OFBiz'
  1. OFBiz
  2. OFBIZ-9835

Update Solr/Lucene to 7.1.0 [CVE-2017-9803] [CVE-2017-12629]

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Minor
    • Resolution: Implemented
    • Affects Version/s: Trunk
    • Fix Version/s: Upcoming Release
    • Component/s: lucene, solr
    • Labels:

      Description

      Solr/Lucene 7.1.0 was released recently, so the question is if Solr/lucene should be updated?

      Solr News

      Update: there are two security vulnerabilities and it is recommended to upgrade to 7.1.0 asap.

        Activity

        Hide
        jacques.le.roux Jacques Le Roux added a comment -

        Hi Michael, Julian

        Yes please do ASAP, if possible. A CVE label should be added, and I'd make clear the CVE number in the description. Thanks!

        Show
        jacques.le.roux Jacques Le Roux added a comment - Hi Michael, Julian Yes please do ASAP, if possible. A CVE label should be added, and I'd make clear the CVE number in the description. Thanks!
        Hide
        mbrohl Michael Brohl added a comment -

        7.1.0 was released yesterday, I think we should update to this version then.

        Show
        mbrohl Michael Brohl added a comment - 7.1.0 was released yesterday, I think we should update to this version then.
        Hide
        jacques.le.roux Jacques Le Roux added a comment -

        +1

        Show
        jacques.le.roux Jacques Le Roux added a comment - +1
        Hide
        mbrohl Michael Brohl added a comment -

        Update to 7.1.0 is committed in trunk r1812790.

        Thanks Julian for reporting.

        Show
        mbrohl Michael Brohl added a comment - Update to 7.1.0 is committed in trunk r1812790. Thanks Julian for reporting.

          People

          • Assignee:
            mbrohl Michael Brohl
            Reporter:
            jleichert Julian Leichert
          • Votes:
            1 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development