You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@solr.apache.org by "Jan Høydahl (Jira)" <ji...@apache.org> on 2023/01/11 09:25:00 UTC
[jira] [Commented] (SOLR-16523) Upgrade jattach in 8.11 Dockerfile after Solr 9.2 release
[ https://issues.apache.org/jira/browse/SOLR-16523?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17672263#comment-17672263 ]
Jan Høydahl commented on SOLR-16523:
------------------------------------
The 8.11 Jattach upgrade is tracked in [https://github.com/apache/solr-docker/pull/14,] but we have to wait with that until after the release of v9.2, since else 8.11.x users upgrading to 9.1 would downgrade jattach.
> Upgrade jattach in 8.11 Dockerfile after Solr 9.2 release
> ---------------------------------------------------------
>
> Key: SOLR-16523
> URL: https://issues.apache.org/jira/browse/SOLR-16523
> Project: Solr
> Issue Type: Improvement
> Security Level: Public(Default Security Level. Issues are Public)
> Components: Docker
> Affects Versions: 8.11.2
> Reporter: Ritchie Gu
> Assignee: Jan Høydahl
> Priority: Major
> Time Spent: 10m
> Remaining Estimate: 0h
>
> I noticed that as part of the process, it's installing gosu and few other packages [https://github.com/apache/solr-docker/blob/main/8.11-slim/Dockerfile#L20,]
> The version of gosu gets installed is a bit of old, and do you have any plan to install newer version gosu in?
>
> CVE-2022-27664
> https://nvd.nist.gov/vuln/detail/CVE-2022-27664
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org