You are viewing a plain text version of this content. The canonical link for it is here.
Posted to oak-issues@jackrabbit.apache.org by "Marco Piovesana (Jira)" <ji...@apache.org> on 2022/03/30 07:51:00 UTC

[jira] [Commented] (OAK-6412) Consider upgrading to newer Lucene versions

    [ https://issues.apache.org/jira/browse/OAK-6412?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17514499#comment-17514499 ] 

Marco Piovesana commented on OAK-6412:
--------------------------------------

Hi,

there is any plan for updating lucene version? As mentioned [here|https://nvd.nist.gov/vuln/detail/CVE-2017-12629] the version currently used has critical vulnerabilites.

Marco.

> Consider upgrading to newer Lucene versions
> -------------------------------------------
>
>                 Key: OAK-6412
>                 URL: https://issues.apache.org/jira/browse/OAK-6412
>             Project: Jackrabbit Oak
>          Issue Type: Improvement
>          Components: lucene
>            Reporter: Tommaso Teofili
>            Assignee: Tommaso Teofili
>            Priority: Major
>
> An year ago I had started prototyping the upgrade to Lucene 5 [1], in the meantime version 6 (and 7 soon) has come out.
> I think it'd be very nice to upgrade Lucene version to the latest, this would give us improvements in space consumption and runtime performance.
> In case we want to upgrade to 6.0 or later we need to consider upgrade scenarios because Lucene Codecs are backward compatible with the previous major release, so Lucene 6 can read Lucene 5 but not Lucene 4.x (4.7 in our case) therefore we would need to detect that when reading an index and trigger reindexing using the new format.
> Related to that there's also a patch to upgrade Solr index to version 5 (see OAK-4318).
> [1] : https://github.com/tteofili/jackrabbit-oak/tree/lucene5



--
This message was sent by Atlassian Jira
(v8.20.1#820001)