[jira] [Comment Edited] (SOLR-17127) Update components in solr 8.11.2 and 9.4.1

["Rafael Rios Saavedra (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/SOLR-17127?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17810334#comment-17810334 ] 

Rafael Rios Saavedra edited comment on SOLR-17127 at 1/24/24 11:28 AM:
-----------------------------------------------------------------------

ok,  Thanks for the link to the "not exploitable table" that will be useful.

Also, I would like to suggest to refer to  [https://solr.apache.org/security.html] in a security.txt in the github repo. That would make easier to find it.

Thanks.


was (Author: JIRAUSER302337):
ok,  Thanks for the link to the "not exploitable table" that will be useful.

 

> Update components in solr 8.11.2 and 9.4.1
> ------------------------------------------
>
>                 Key: SOLR-17127
>                 URL: https://issues.apache.org/jira/browse/SOLR-17127
>             Project: Solr
>          Issue Type: Task
>      Security Level: Public(Default Security Level. Issues are Public) 
>            Reporter: Rafael Rios Saavedra
>            Priority: Major
>
> There are several components affected by CVEs in solr: 8.11.2 and 9.4.1.
> You could list them by running trivy scans:
> {code:java}
> $ trivy image --vuln-type library solr:8.11.2
> $ trivy image --vuln-type library solr:9.4.1 {code}
> is there any plan to update them ? I could not find any reference.
> Thanks forehand



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org