You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@lucene.apache.org by Apache Wiki <wi...@apache.org> on 2019/02/06 20:44:12 UTC

[Solr Wiki] Update of "SolrSecurity" by CassandraTargett

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Solr Wiki" for change notification.

The "SolrSecurity" page has been changed by CassandraTargett:
https://wiki.apache.org/solr/SolrSecurity?action=diff&rev1=58&rev2=59

Comment:
Add slf4j

  || 5.4.0-today || `carrot2-guava-18.0.jar` || 2018-10237 || 31 Dec 2018 || Only used with the Carrot2 clustering engine. ||
  || 4.6.0-today || `guava-14.0.1.jar` || 2018-10237 || 31 Dec 2018 || ?? ||
  || 5.4.0-today || `simple-xml-2.7.1.jar` || 2018-1471 || 3 Jan 2019 || Dependency of Carrot2 and used during compilation, not at runtime (see [[https://issues.apache.org/jira/browse/SOLR-769|SOLR-769]]). ||
+ || 4.x-today || `slf4j-api-1.7.24.jar`, `jcl-over-slf4j-1.7.24.jar`, `jul-to-slf4j-1.7.24.jar` || 2018-8088 || 6 Feb 2019 || The reported CVE impacts org.slf4j.ext.EventData, which is not used in Solr. ||