Hi, I committed the Apache POI dependency upgrade for Solr. Sorry that I missed this, but releasing a new version with a known security problem that already has a CVE number is a no-go. So -1 to release the current artifacts. I am very sorry! :(
In addition, the changes.txt of Solr had a misplaced changes entry (preexisting problem in 4.9.0) - now corrected. Uwe P.S.: The CVE numbers are already circulated and several Linux distributions already opened issues and updated their packages. ----- Uwe Schindler H.-H.-Meier-Allee 63, D-28213 Bremen http://www.thetaphi.de eMail: u...@thetaphi.de > -----Original Message----- > From: Uwe Schindler [mailto:u...@thetaphi.de] > Sent: Thursday, September 18, 2014 9:35 AM > To: dev@lucene.apache.org > Subject: RE: [VOTE] Release 4.9.1 RC0 > > Hi, > > unfortunately I forgot one thing: The big security issue with Apache POI! As > we are releasing a new version, we should fix this, too! Respin? > > Uwe > > ----- > Uwe Schindler > H.-H.-Meier-Allee 63, D-28213 Bremen > http://www.thetaphi.de > eMail: u...@thetaphi.de > > > > -----Original Message----- > > From: Michael McCandless [mailto:luc...@mikemccandless.com] > > Sent: Wednesday, September 17, 2014 5:04 PM > > To: Lucene/Solr dev > > Subject: [VOTE] Release 4.9.1 RC0 > > > > Artifacts here: > > http://people.apache.org/~mikemccand/staging_area/lucene-solr-4.9.1- > > RC0-rev1625586 > > > > Smoke tester: python3 -u dev-tools/scripts/smokeTestRelease.py > > http://people.apache.org/~mikemccand/staging_area/lucene-solr-4.9.1- > > RC0-rev1625586 > > 1625586 4.9.1 /tmp/smoke491 True > > > > > SUCCESS! [0:24:36.203643] > > > > Here's my +1 > > > > Mike McCandless > > > > http://blog.mikemccandless.com > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org For > > additional commands, e-mail: dev-h...@lucene.apache.org > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org For additional > commands, e-mail: dev-h...@lucene.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org For additional commands, e-mail: dev-h...@lucene.apache.org
