This is an automated email from the ASF dual-hosted git repository.
jleroux pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/ofbiz-plugins.git
The following commit(s) were added to refs/heads/trunk by this push:
new 7f8ec07b5 Fixed: Update Solr and Lucene from 8.11.1 to 8.11.2 for
security reason (OFBIZ-12656)
7f8ec07b5 is described below
commit 7f8ec07b5359d964546f81b897a4849017402fb4
Author: Jacques Le Roux <[email protected]>
AuthorDate: Wed Jun 22 11:45:53 2022 +0200
Fixed: Update Solr and Lucene from 8.11.1 to 8.11.2 for security reason
(OFBIZ-12656)
There was fixed security issues in Solr:
https://lists.apache.org/thread/wn9wkmx1ogbf00hj78y2xt3l0bo15ob9
Not in Lucene, but we need sync between them:
https://lists.apache.org/thread/olf2bhqy1ws9f0kp9nb8zs6g5dcl89l5
---
lucene/build.gradle | 6 +++---
.../src/main/java/org/apache/ofbiz/content/search/SearchWorker.java | 2 +-
solr/build.gradle | 2 +-
solr/home/solrdefault/conf/solrconfig.xml | 2 +-
4 files changed, 6 insertions(+), 6 deletions(-)
diff --git a/lucene/build.gradle b/lucene/build.gradle
index 300ea9608..ac9c98ef2 100644
--- a/lucene/build.gradle
+++ b/lucene/build.gradle
@@ -20,7 +20,7 @@ dependencies {
// 1. Remember to change the version LUCENE_VERSION in SearchWorker class
when upgrading.
// 2. luceneMatchVersion should be updated in solrconfig.xml
// 3. Also Solr et Lucene should use the same version,
- pluginLibsCompile 'org.apache.lucene:lucene-core:8.11.1'
- pluginLibsCompile 'org.apache.lucene:lucene-queryparser:8.11.1'
- pluginLibsCompile 'org.apache.lucene:lucene-analyzers-common:8.11.1'
+ pluginLibsCompile 'org.apache.lucene:lucene-core:8.11.2'
+ pluginLibsCompile 'org.apache.lucene:lucene-queryparser:8.11.2'
+ pluginLibsCompile 'org.apache.lucene:lucene-analyzers-common:8.11.2'
}
diff --git
a/lucene/src/main/java/org/apache/ofbiz/content/search/SearchWorker.java
b/lucene/src/main/java/org/apache/ofbiz/content/search/SearchWorker.java
index 41d2d698b..c7f90ac81 100644
--- a/lucene/src/main/java/org/apache/ofbiz/content/search/SearchWorker.java
+++ b/lucene/src/main/java/org/apache/ofbiz/content/search/SearchWorker.java
@@ -41,7 +41,7 @@ public final class SearchWorker {
private static final String MODULE = SearchWorker.class.getName();
- private static final Version LUCENE_VERSION = Version.LUCENE_8_11_1;
+ private static final Version LUCENE_VERSION = Version.LUCENE_8_11_2;
private SearchWorker() { }
diff --git a/solr/build.gradle b/solr/build.gradle
index 06ca6f6b8..fc57456dc 100644
--- a/solr/build.gradle
+++ b/solr/build.gradle
@@ -20,7 +20,7 @@ dependencies {
// 1. Remember to change the version LUCENE_VERSION in SearchWorker class
when upgrading.
// 2. luceneMatchVersion should be updated in solrconfig.xml
// 3. Also Solr et Lucene should use the same version,
- pluginLibsCompile 'org.apache.solr:solr-core:8.11.1'
+ pluginLibsCompile 'org.apache.solr:solr-core:8.11.2'
pluginLibsCompile 'com.google.guava:guava:28.0-jre'
}
diff --git a/solr/home/solrdefault/conf/solrconfig.xml
b/solr/home/solrdefault/conf/solrconfig.xml
index b9e8e06da..e9e9ae6e0 100644
--- a/solr/home/solrdefault/conf/solrconfig.xml
+++ b/solr/home/solrdefault/conf/solrconfig.xml
@@ -35,7 +35,7 @@
that you fully re-index after changing this setting as it can
affect both how text is indexed and queried.
-->
- <luceneMatchVersion>8.11.1</luceneMatchVersion>
+ <luceneMatchVersion>8.11.2</luceneMatchVersion>
<!-- <lib/> directives can be used to instruct Solr to load any Jars
identified and use them to resolve any "plugins" specified in
