You are viewing a plain text version of this content. The canonical link for it is here.

Posted to users@solr.apache.org by Joseph Gonzalez <jg...@reingold.com> on 2022/11/02 20:31:47 UTC

SOLR CVE Update Apache Calcite Driver

Hello,

My project security team ran a scan against a SOLR 8.11.1 Docker Image and found a couple vulnerabilities that they recommended I open tickets for.

Apache Calcite Driver
CVE-2022-36364

Apache Avatica Core
CVE-2022-39135

Zlib
CVE-2022-37434

Thanks,

Joe

Re: SOLR CVE Update Apache Calcite Driver

Posted by Jan Høydahl <ja...@cominvent.com>.

Will arrive in 8.11.3 and 9.1 https://issues.apache.org/jira/browse/SOLR-16421

Why do you believe Solr is vulnerable to lib CVE-2022-37434 ?

Jan

> 2. nov. 2022 kl. 21:31 skrev Joseph Gonzalez <jg...@reingold.com>:
> 
> Hello,
> 
> My project security team ran a scan against a SOLR 8.11.1 Docker Image and found a couple vulnerabilities that they recommended I open tickets for.
> 
> Apache Calcite Driver
> CVE-2022-36364
> 
> Apache Avatica Core
> CVE-2022-39135
> 
> Zlib
> CVE-2022-37434
> 
> Thanks,
> 
> Joe