You are viewing a plain text version of this content. The canonical link for it is here.

Posted to users@solr.apache.org by Joseph Gonzalez <jg...@reingold.com> on 2023/01/20 15:00:09 UTC

Backport Netty 4.1.87.Final to Solr 8.11.3

Hello,

I saw that Netty 4.1.87.Final was brought into SOLR 9.2 via https://issues.apache.org/jira/browse/SOLR-16626.

Can that change be backported to Solr 8.11.3 to resolve CVE-2022-41881?

Thanks,

Joe

Re: Backport Netty 4.1.87.Final to Solr 8.11.3

Posted by Jan Høydahl <ja...@cominvent.com>.

I threw up a PR for a backport: https://github.com/apache/lucene-solr/pull/2676

Jan

> 20. jan. 2023 kl. 16:00 skrev Joseph Gonzalez <jg...@reingold.com>:
> 
> Hello,
> 
> I saw that Netty 4.1.87.Final was brought into SOLR 9.2 via https://issues.apache.org/jira/browse/SOLR-16626.
> 
> Can that change be backported to Solr 8.11.3 to resolve CVE-2022-41881?
> 
> Thanks,
> 
> Joe