[SOLR-13506] Upgrade carrot2-guava-*.jar

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Won't Fix
• Affects Version/s: 7.7.1, 8.0, 8.1
• Component/s: contrib - Clustering
• Assignee: Dawid Weiss
• Reporter: DW
• Created: 31/May/19 13:45
• Updated: 30/Oct/20 12:23
• Resolved: 30/Oct/20 12:23

Description

The Solr package contains /contrib/clustering/lib/carrot2-guava-18.0.jar.

cpe:/a:google:guava:18.0 has know security vulnerabilities. 

Can you please upgrade the library or remove if not needed.

Thanks.

Issue Links

• is duplicated by: SOLR-14960 Solr-clustering is bringing in CVE-2018-10237 vulnerable guava
• is part of: SOLR-14926 Modernize and clean up document clustering contrib