issues  

Messages by Date

• 2026/08/13 [PR] Split lz4-java CVEs by fix boundary and emit a matchable org.lz4 purl [solr-site] via GitHub
• 2026/08/13 Re: [PR] SOLR-16309: Bump jquery ui to deal with some older cve's [solr] via GitHub
• 2026/08/13 Re: [PR] SOLR-18013: Expand existing file with additional CVES for lz4 [solr-site] via GitHub
• 2026/08/13 [jira] [Commented] (SOLR-16309) Upgrade vulnerable jQuery UI to version 1.13.2 Eric Pugh (Jira)
• 2026/08/13 Re: [PR] SOLR-16309: document the jquery-ui CVE applicablity. [solr-site] via GitHub
• 2026/08/13 [PR] SOLR-16309: Bump jquery ui to deal with some older cve's [solr] via GitHub
• 2026/08/13 [jira] [Commented] (SOLR-18333) upgrade jackson-databind to 2.21.5 to fix CVE-2026-54518, CVE-2026-59889, CVE-2026-54515 Eric Pugh (Jira)
• 2026/08/13 Re: [PR] Update plugin com.palantir.consistent-versions to v2.37.0 (branch_9x) [solr] via GitHub
• 2026/08/13 [jira] [Reopened] (SOLR-13309) Add FieldTypes for Lucene IntRange, LongRange, FloatRange, DoubleRange Jason Gerlowski (Jira)
• 2026/08/13 [PR] Update plugin com.palantir.consistent-versions to v2.37.0 (branch_9x) [solr] via GitHub
• 2026/08/13 Re: [PR] SOLR-18344: Report in-progress backup status on /replication?command=details [solr] via GitHub
• 2026/08/13 [jira] [Resolved] (SOLR-18333) upgrade jackson-databind to 2.21.5 to fix CVE-2026-54518, CVE-2026-59889, CVE-2026-54515 Eric Pugh (Jira)
• 2026/08/13 Re: [PR] Split bundled 2026 jackson-databind VEX entry into per-CVE files with accurate ranges [solr-site] via GitHub
• 2026/08/13 [PR] Split bundled 2026 jackson-databind VEX entry into per-CVE files with accurate ranges [solr-site] via GitHub
• 2026/08/13 Re: [PR] SOLR-18333: Document the CVE, it's already partly covered in this existing file [solr-site] via GitHub
• 2026/08/13 Re: [PR] SOLR-18332: More 'qt' removal, rd 4 [solr] via GitHub
• 2026/08/13 Re: [PR] SOLR-18332: More 'qt' removal, rd 4 [solr] via GitHub
• 2026/08/13 [jira] [Updated] (SOLR-18346) Leader-to-replica update retry depends on which exception the client reports outermost ASF GitHub Bot (Jira)
• 2026/08/13 Re: [PR] SOLR-18346: decide update retries from the cause chain, not one fixed position in it [solr] via GitHub
• 2026/08/13 [jira] [Created] (SOLR-18346) Leader-to-replica update retry depends on which exception the client reports outermost Serhiy Bzhezytskyy (Jira)
• 2026/08/13 Re: [PR] Update all non-major dependencies (branch_9x) [solr] via GitHub
• 2026/08/13 Re: [PR] Pin dependency no.nav.security:mock-oauth2-server to 0.5.16 to remain java 11 compatible. (branch_9x) [solr] via GitHub
• 2026/08/13 Re: [PR] Update all non-major dependencies (branch_9x) [solr] via GitHub
• 2026/08/13 Re: [PR] Pin dependency no.nav.security:mock-oauth2-server to 0.5.16 to remain java 11 compatible. (branch_9x) [solr] via GitHub
• 2026/08/13 Re: [PR] Pin dependency no.nav.security:mock-oauth2-server to 0.5.16 to remain java 11 compatible. (branch_9x) [solr] via GitHub
• 2026/08/13 Re: [PR] Pin dependencies to java 11 for Solrbot [solr] via GitHub
• 2026/08/13 [PR] Pin dependencies to java 11 for Solrbot [solr] via GitHub
• 2026/08/13 Re: [PR] Pin dependencies to java 11 for Solrbot [solr] via GitHub
• 2026/08/13 Re: [PR] Pin dependencies to java 11 for Solrbot [solr] via GitHub
• 2026/08/13 [PR] Pin dependencies to java 11 for Solrbot [solr] via GitHub
• 2026/08/13 Re: [PR] SOLR-17841: Use DocSetCollector for multithreaded DocSet(Faceted) search [solr] via GitHub
• 2026/08/12 Re: [PR] SOLR-18332: More 'qt' removal, rd 4 [solr] via GitHub
• 2026/08/12 [jira] [Resolved] (SOLR-17236) Update jackson-databind for 8.11.x Eric Pugh (Jira)
• 2026/08/12 Re: [PR] Refine jackson-databind gadget CVE range to 4.7.0-8.6.3 [solr-site] via GitHub
• 2026/08/12 [PR] Refine jackson-databind gadget CVE range to 4.7.0-8.6.3 [solr-site] via GitHub
• 2026/08/12 [jira] [Resolved] (SOLR-15507) Upgrade Apache Thrift to 0.14.1 Eric Pugh (Jira)
• 2026/08/12 Re: [PR] SOLR-17236 : Expand the details to link to a Solr JIRA that highlights the same issue. [solr-site] via GitHub
• 2026/08/12 Re: [PR] Correct CVE-2020-13949 (thrift) affected range to 8.2.0-8.11.0 [solr-site] via GitHub
• 2026/08/12 [PR] Correct CVE-2020-13949 (thrift) affected range to 8.2.0-8.11.0 [solr-site] via GitHub
• 2026/08/12 [jira] [Resolved] (SOLR-17900) Multiple CVEs in Apache Hadoop Client Runtime 3.4.0 dependency Eric Pugh (Jira)
• 2026/08/12 Re: [PR] SOLR-15507: document that this was fixed "back in the day" as the refer to 8x [solr-site] via GitHub
• 2026/08/12 Re: [PR] SOLR-17900 follow-up: narrow four Hadoop-shaded CVE ranges to 9.0.0-9.9.0 [solr-site] via GitHub
• 2026/08/12 Re: [PR] SOLR-17900 follow-up: narrow four Hadoop-shaded CVE ranges to 9.0.0-9.9.0 [solr-site] via GitHub
• 2026/08/12 [PR] SOLR-17900 follow-up: narrow four Hadoop-shaded CVE ranges to 9.0.0-9.9.0 [solr-site] via GitHub
• 2026/08/12 [PR] SOLR-18332: More 'qt' removal, rd 4 [solr] via GitHub
• 2026/08/12 Re: [PR] SOLR-17900: Hadoop client CVEs, expand on one existing, add four new ones [solr-site] via GitHub
• 2026/08/12 [jira] [Resolved] (SOLR-17901) CVE-2024-21742: vulnerability in apache-mime4j-core 0.8.4 dependency Eric Pugh (Jira)
• 2026/08/12 Re: [PR] Enhance OpenVEX generator so that aliases are expanded into the one statement per id for suppression [solr-site] via GitHub
• 2026/08/12 [jira] [Resolved] (SOLR-17899) CVE-2024-30171, CVE-2024-30172, CVE-2024-29857, CVE-2023-33201 : vulnerabilities in Bouncy Castle provider 1.70 dependency Eric Pugh (Jira)
• 2026/08/12 Re: [PR] SOLR-17899: Document the impact of these bouncycastle cves on Solr [solr-site] via GitHub
• 2026/08/12 Re: [PR] Pin dependency no.nav.security:mock-oauth2-server to 0.5.16 to remain java 11 compatible. (branch_9x) [solr] via GitHub
• 2026/08/12 [PR] Update all non-major dependencies (branch_9x) [solr] via GitHub
• 2026/08/12 [jira] [Updated] (SOLR-17901) CVE-2024-21742: vulnerability in apache-mime4j-core 0.8.4 dependency ASF GitHub Bot (Jira)
• 2026/08/12 Re: [PR] SOLR-17901: Document that solr is not vulnerable to CVE-2024-21742 apache-mimej-core [solr-site] via GitHub
• 2026/08/12 [jira] [Resolved] (SOLR-17903) CVE-2025-31672: vulnerability in poi-ooxml 5.2.2 dependency Eric Pugh (Jira)
• 2026/08/12 Re: [PR] SOLR-17903: Describe why this CVE for POI is not an issue for Solr [solr-site] via GitHub
• 2026/08/12 Re: [PR] SOLR-17903: Describe why this CVE for POI is not an issue for Solr [solr-site] via GitHub
• 2026/08/12 [jira] [Commented] (SOLR-18332) Remove usages of deprecated 'qt' parameter and related SolrJ functionality ASF subversion and git services (Jira)
• 2026/08/12 Re: [PR] SOLR-18332: More qt-removal from tests, rd 3 [solr] via GitHub
• 2026/08/12 [PR] SOLR-18345: ClientUtils.encodeLocalParamVal fix for \, ', " [solr] via GitHub
• 2026/08/12 [jira] [Updated] (SOLR-18345) ClientUtils.encodeLocalParamVal() can produces lossy/invalid encodings ASF GitHub Bot (Jira)
• 2026/08/12 [jira] [Commented] (SOLR-18345) ClientUtils.encodeLocalParamVal() can produces lossy/invalid encodings David Smiley (Jira)
• 2026/08/12 [jira] [Commented] (SOLR-18345) ClientUtils.encodeLocalParamVal() can produces lossy/invalid encodings David Smiley (Jira)
• 2026/08/12 Re: [PR] Update all non-major dependencies (branch_9x) [solr] via GitHub
• 2026/08/12 [jira] [Updated] (SOLR-18345) ClientUtils.encodeLocalParamVal() can produces lossy/invalid encodings David Smiley (Jira)
• 2026/08/12 [jira] [Created] (SOLR-18345) ClientUtils.encodeLocalParamVal() can produces lossy/invalid encodings David Smiley (Jira)
• 2026/08/12 Re: [PR] SOLR-18344: Report in-progress backup status on /replication?command=details [solr] via GitHub
• 2026/08/12 Re: [PR] SOLR-18344: Report in-progress backup status on /replication?command=details [solr] via GitHub
• 2026/08/12 [jira] [Commented] (SOLR-18344) Backup status is not reported on /replication?command=details until the backup completes Eric Pugh (Jira)
• 2026/08/12 [jira] [Created] (SOLR-18344) Backup status is not reported on /replication?command=details until the backup completes Idan Tepper (Jira)
• 2026/08/12 [jira] [Updated] (SOLR-18344) Backup status is not reported on /replication?command=details until the backup completes ASF GitHub Bot (Jira)
• 2026/08/12 [PR] SOLR-18344: Report in-progress backup status on /replication?command=details [solr] via GitHub
• 2026/08/12 Re: [PR] SOLR-17841: Use DocSetCollector for multithreaded DocSet(Faceted) search [solr] via GitHub
• 2026/08/12 Re: [PR] Wire up NVD API key for the owasp Gradle task [solr] via GitHub
• 2026/08/12 Re: [PR] Update plugin org.owasp.dependencycheck to v13 (branch_9x) [solr] via GitHub
• 2026/08/12 Re: [PR] Update all non-major dependencies (branch_9x) [solr] via GitHub
• 2026/08/12 Re: [PR] HttpJettySolrClient: use fewer threads [solr] via GitHub
• 2026/08/12 Re: [PR] writeChangelogPr pr option [solr] via GitHub
• 2026/08/12 Re: [PR] build: rat -- suppress noise [solr] via GitHub
• 2026/08/12 [jira] [Created] (SOLR-18343) SolrJ: require an explicit HTTP method on admin requests; stop defaulting to GET David Smiley (Jira)
• 2026/08/12 [PR] SOLR-18342: Upgrade Gradle build to 9.7.0 [solr] via GitHub
• 2026/08/12 [jira] [Updated] (SOLR-18342) Upgrade to Gradle 9.7.0 ASF GitHub Bot (Jira)
• 2026/08/12 [jira] [Created] (SOLR-18342) Upgrade to Gradle 9.7.0 Serhiy Bzhezytskyy (Jira)
• 2026/08/12 [jira] [Commented] (SOLR-18250) Fix GCS backup copyIndexFileTo silently swallowing exceptions and prematurely terminating reads Prithvi (Jira)
• 2026/08/12 [jira] [Assigned] (SOLR-18250) Fix GCS backup copyIndexFileTo silently swallowing exceptions and prematurely terminating reads Eric Pugh (Jira)
• 2026/08/12 Re: [PR] GCSBackupRepository.copyIndexFileTo must not swallow failures [solr] via GitHub
• 2026/08/12 Re: [PR] SOLR-18250: GCSBackupRepository.copyIndexFileTo must not swallow failures [solr] via GitHub
• 2026/08/12 Re: [PR] SOLR-18250: GCSBackupRepository.copyIndexFileTo must not swallow failures [solr] via GitHub
• 2026/08/12 [jira] [Updated] (SOLR-18250) Fix GCS backup copyIndexFileTo silently swallowing exceptions and prematurely terminating reads ASF GitHub Bot (Jira)
• 2026/08/12 Re: [PR] SOLR-18250: GCSBackupRepository.copyIndexFileTo must not swallow failures [solr] via GitHub
• 2026/08/12 Re: [PR] GCSBackupRepository.copyIndexFileTo must not swallow failures [solr] via GitHub
• 2026/08/12 Re: [PR] GCSBackupRepository.copyIndexFileTo must not swallow failures [solr] via GitHub
• 2026/08/12 Re: [PR] GCSBackupRepository.copyIndexFileTo must not swallow failures [solr] via GitHub
• 2026/08/12 [PR] GCSBackupRepository.copyIndexFileTo must not swallow failures [solr] via GitHub
• 2026/08/12 Re: [PR] Update all non-major dependencies (branch_9x) [solr] via GitHub
• 2026/08/12 Re: [PR] Update all non-major dependencies (branch_9x) [solr] via GitHub
• 2026/08/12 [jira] [Commented] (SOLR-8885) Update JS lib versions Jira
• 2026/08/12 Re: [PR] Update all non-major dependencies (branch_9x) [solr] via GitHub
• 2026/08/11 [jira] [Commented] (SOLR-16458) Cosmetic improvements and migration to JAX-RS ("node" APIs) Yash Goswmai (Jira)
• 2026/08/11 Re: [PR] SOLR-17841: Use DocSetCollector for multithreaded DocSet(Faceted) search [solr] via GitHub
• 2026/08/11 Re: [PR] SOLR-18332: More qt-removal from tests, rd 3 [solr] via GitHub
• 2026/08/11 [jira] [Commented] (SOLR-17602) Maintain final JAR dependencies in source control to track changes David Smiley (Jira)
• 2026/08/11 Re: [PR] SOLR-15752: Migrate admin UI to v2 apis [solr] via GitHub
• 2026/08/11 [jira] [Resolved] (SOLR-18288) Document non-exploitability of Log4j CVE-2026-34477 through -34481 in Solr 9.10.1 Eric Pugh (Jira)
• 2026/08/11 [jira] [Resolved] (SOLR-2054) Remove StAX libraries from trunk (java6) Eric Pugh (Jira)
• 2026/08/11 [jira] [Commented] (SOLR-15425) Upgrade to Metrics 4.2.0 Eric Pugh (Jira)
• 2026/08/11 [jira] [Resolved] (SOLR-15497) Broken external web links in RefGuide Eric Pugh (Jira)
• 2026/08/11 [jira] [Commented] (SOLR-11953) Include JTS with Solr Eric Pugh (Jira)
• 2026/08/11 [jira] [Commented] (SOLR-8885) Update JS lib versions Eric Pugh (Jira)
• 2026/08/11 [jira] [Updated] (SOLR-8885) Update JS lib versions Eric Pugh (Jira)
• 2026/08/11 [jira] [Resolved] (SOLR-3958) Solr should log a warning when old healthcheck method configured Eric Pugh (Jira)
• 2026/08/11 Re: [PR] SOLR-18201: Range Fields support docValues based optimization [solr] via GitHub
• 2026/08/11 [jira] [Updated] (SOLR-10702) Woodstox API ASF GitHub Bot (Jira)
• 2026/08/11 [jira] [Commented] (SOLR-17571) Introduce dependabot Eric Pugh (Jira)
• 2026/08/11 [PR] SOLR-10702: Document that in 9.0 and 9.1 we had exploitable CVE for woodstox [solr-site] via GitHub
• 2026/08/11 Re: [PR] Update plugin org.owasp.dependencycheck to v13 (branch_9x) [solr] via GitHub
• 2026/08/11 Re: [PR] Update all non-major dependencies (branch_9x) [solr] via GitHub
• 2026/08/11 [jira] [Commented] (SOLR-10702) Woodstox API Eric Pugh (Jira)
• 2026/08/11 [jira] [Assigned] (SOLR-10702) Woodstox API Eric Pugh (Jira)
• 2026/08/11 Re: [PR] SOLR-18161: improve node system response [solr] via GitHub
• 2026/08/11 [jira] [Updated] (SOLR-15507) Upgrade Apache Thrift to 0.14.1 ASF GitHub Bot (Jira)
• 2026/08/11 [PR] SOLR-15507: docuemnt that this was fixed "back in the day" [solr-site] via GitHub
• 2026/08/11 [jira] [Commented] (SOLR-15507) Upgrade Apache Thrift to 0.14.1 Eric Pugh (Jira)
• 2026/08/11 [jira] [Assigned] (SOLR-15507) Upgrade Apache Thrift to 0.14.1 Eric Pugh (Jira)
• 2026/08/11 Re: [PR] Wire up NVD API key for the owasp Gradle task [solr] via GitHub
• 2026/08/11 [PR] Wire up NVD API key for the owasp Gradle task [solr] via GitHub
• 2026/08/11 Re: [PR] Update all non-major dependencies (branch_9x) [solr] via GitHub
• 2026/08/11 Re: [PR] Update all non-major dependencies (branch_9x) [solr] via GitHub
• 2026/08/11 Re: [PR] Update dependency io.ktor:ktor-bom to v3.5.1 [solr] via GitHub
• 2026/08/11 [jira] [Resolved] (SOLR-18052) Complete Major changes and Upgrade Notes in RefGuide for 10.0.0 Eric Pugh (Jira)
• 2026/08/11 [jira] [Resolved] (SOLR-13959) Upgrade log4j2 to the current version, presently 2.12.1 Eric Pugh (Jira)
• 2026/08/11 Re: [PR] Update dependency io.ktor:ktor-bom to v3.5.1 [solr] via GitHub
• 2026/08/11 [jira] [Resolved] (SOLR-2407) investigate upgrading easymock to a newer version Eric Pugh (Jira)
• 2026/08/11 Re: [PR] SOLR-18158: Upgrade cuVS to 26.02 [solr] via GitHub
• 2026/08/11 Re: [PR] SOLR-18300 : Update apache.kafka to V4 [solr] via GitHub
• 2026/08/11 Re: [PR] SOLR-18300 : Update apache.kafka to V4 [solr] via GitHub
• 2026/08/11 [jira] [Commented] (SOLR-17602) Maintain final JAR dependencies in source control to track changes Eric Pugh (Jira)
• 2026/08/11 [jira] [Commented] (SOLR-16309) Upgrade vulnerable jQuery UI to version 1.13.2 Eric Pugh (Jira)
• 2026/08/11 [jira] [Updated] (SOLR-16309) Upgrade vulnerable jQuery UI to version 1.13.2 ASF GitHub Bot (Jira)
• 2026/08/11 [PR] SOLR-16309: document the jquery-ui CVE applicablity. [solr-site] via GitHub
• 2026/08/11 [jira] [Commented] (SOLR-18013) Upgrade lz4 jar to fix CVE-2025-12183 and CVE-2025-66566 Eric Pugh (Jira)
• 2026/08/11 [jira] [Assigned] (SOLR-18013) Upgrade lz4 jar to fix CVE-2025-12183 and CVE-2025-66566 Eric Pugh (Jira)
• 2026/08/11 [jira] [Updated] (SOLR-18013) Upgrade lz4 jar to fix CVE-2025-12183 and CVE-2025-66566 ASF GitHub Bot (Jira)
• 2026/08/11 [PR] SOLR-18013: Expand existing file with additional CVES for lz4 [solr-site] via GitHub
• 2026/08/11 [jira] [Updated] (SOLR-17899) CVE-2024-30171, CVE-2024-30172, CVE-2024-29857, CVE-2023-33201 : vulnerabilities in Bouncy Castle provider 1.70 dependency ASF GitHub Bot (Jira)
• 2026/08/11 [jira] [Commented] (SOLR-18333) upgrade jackson-databind to 2.21.5 to fix CVE-2026-54518, CVE-2026-59889, CVE-2026-54515 Eric Pugh (Jira)
• 2026/08/11 [jira] [Updated] (SOLR-18333) upgrade jackson-databind to 2.21.5 to fix CVE-2026-54518, CVE-2026-59889, CVE-2026-54515 ASF GitHub Bot (Jira)
• 2026/08/11 [jira] [Assigned] (SOLR-18333) upgrade jackson-databind to 2.21.5 to fix CVE-2026-54518, CVE-2026-59889, CVE-2026-54515 Eric Pugh (Jira)
• 2026/08/11 [jira] [Updated] (SOLR-17900) Multiple CVEs in Apache Hadoop Client Runtime 3.4.0 dependency ASF GitHub Bot (Jira)
• 2026/08/11 [PR] SOLR-18333: Document the CVE, it's already partly covered in this existing file [solr-site] via GitHub
• 2026/08/11 [jira] [Commented] (SOLR-17899) CVE-2024-30171, CVE-2024-30172, CVE-2024-29857, CVE-2023-33201 : vulnerabilities in Bouncy Castle provider 1.70 dependency Eric Pugh (Jira)
• 2026/08/11 [jira] [Updated] (SOLR-17236) Update jackson-databind for 8.11.x ASF GitHub Bot (Jira)
• 2026/08/11 [PR] SOLR-17236 : Expand the details to link to a Solr JIRA that highlights the same issue. [solr-site] via GitHub
• 2026/08/11 [jira] [Assigned] (SOLR-17900) Multiple CVEs in Apache Hadoop Client Runtime 3.4.0 dependency Eric Pugh (Jira)
• 2026/08/11 [jira] [Assigned] (SOLR-17899) CVE-2024-30171, CVE-2024-30172, CVE-2024-29857, CVE-2023-33201 : vulnerabilities in Bouncy Castle provider 1.70 dependency Eric Pugh (Jira)
• 2026/08/11 [jira] [Commented] (SOLR-17236) Update jackson-databind for 8.11.x Eric Pugh (Jira)
• 2026/08/11 Re: [PR] Enhance OpenVEX generator so that aliases are expanded into the one statement per id for suppression [solr-site] via GitHub
• 2026/08/11 [PR] Enhance OpenVEX generator so that aliases are expanded into the one statement per id for suppression [solr-site] via GitHub
• 2026/08/11 [jira] [Assigned] (SOLR-17236) Update jackson-databind for 8.11.x Eric Pugh (Jira)
• 2026/08/11 [jira] [Commented] (SOLR-17900) Multiple CVEs in Apache Hadoop Client Runtime 3.4.0 dependency Eric Pugh (Jira)
• 2026/08/11 [jira] [Commented] (SOLR-17901) CVE-2024-21742: vulnerability in apache-mime4j-core 0.8.4 dependency Eric Pugh (Jira)
• 2026/08/11 [jira] [Assigned] (SOLR-17901) CVE-2024-21742: vulnerability in apache-mime4j-core 0.8.4 dependency Eric Pugh (Jira)
• 2026/08/11 [PR] SOLR-17900: Hadoop client CVEs, expand on one existing, add four new ones [solr-site] via GitHub
• 2026/08/11 [PR] SOLR-17899: Document the impact of these bouncycastle cves on Solr [solr-site] via GitHub
• 2026/08/11 [PR] Document that solr is not vulnerable to CVE-2024-21742 apache-mimej-core [solr-site] via GitHub
• 2026/08/11 Re: [PR] SOLR-18312: introduce dedicated thread pool executor for httpClientBu… [solr] via GitHub
• 2026/08/11 [jira] [Resolved] (SOLR-17833) Assess expoitability of CVE-2024-7254 in dependency `protobuf-java` Eric Pugh (Jira)
• 2026/08/11 [jira] [Commented] (SOLR-17755) Official Docker Images with a horrible number of security vulnerabilities Eric Pugh (Jira)
• 2026/08/11 [jira] [Comment Edited] (SOLR-9355) ConcurrentUpdateSolrClient does not retry sending docs to followers David Smiley (Jira)
• 2026/08/11 [jira] [Resolved] (SOLR-9355) ConcurrentUpdateSolrClient does not retry sending docs to followers David Smiley (Jira)
• 2026/08/11 Re: [PR] reduce churn in this file by making sure keys are sorted properly as we add new information. [solr-site] via GitHub
• 2026/08/11 [PR] reduce churn in this file by making sure keys are sorted properly as we add new information. [solr-site] via GitHub
• 2026/08/11 [jira] (SOLR-17903) CVE-2025-31672: vulnerability in poi-ooxml 5.2.2 dependency Eric Pugh (Jira)
• 2026/08/11 [jira] [Commented] (SOLR-17903) CVE-2025-31672: vulnerability in poi-ooxml 5.2.2 dependency Eric Pugh (Jira)
• 2026/08/11 [jira] [Updated] (SOLR-17903) CVE-2025-31672: vulnerability in poi-ooxml 5.2.2 dependency ASF GitHub Bot (Jira)
• 2026/08/11 [PR] SOLR-17903: Describe why this CVE for POI is not an issue for Solr [solr-site] via GitHub
• 2026/08/11 [jira] [Updated] (SOLR-18341) SolrJ: let each SolrRequest declare whether it may be retried David Smiley (Jira)
• 2026/08/11 [jira] [Commented] (SOLR-17903) CVE-2025-31672: vulnerability in poi-ooxml 5.2.2 dependency Eric Pugh (Jira)
• 2026/08/11 [jira] [Updated] (SOLR-18341) SolrJ: let each SolrRequest declare whether it may be retried David Smiley (Jira)
• 2026/08/11 [jira] [Assigned] (SOLR-17903) CVE-2025-31672: vulnerability in poi-ooxml 5.2.2 dependency Eric Pugh (Jira)
• 2026/08/11 [jira] (SOLR-18341) SolrJ: let each SolrRequest declare whether it may be retried David Smiley (Jira)
• 2026/08/11 [jira] [Updated] (SOLR-18341) SolrJ David Smiley (Jira)
• 2026/08/11 [jira] [Assigned] (SOLR-17833) Assess expoitability of CVE-2024-7254 in dependency `protobuf-java` Eric Pugh (Jira)
• 2026/08/11 [jira] [Resolved] (SOLR-17918) CVE-2025-48734: vulnerability in the commons-beanutils dependency Eric Pugh (Jira)
• 2026/08/11 [jira] [Assigned] (SOLR-17825) Upgrade commons-beanutils jar to 1.11.0+ to fix CVE-2025-48734 Eric Pugh (Jira)
• 2026/08/11 [jira] [Commented] (SOLR-17825) Upgrade commons-beanutils jar to 1.11.0+ to fix CVE-2025-48734 Eric Pugh (Jira)
• 2026/08/11 Re: [PR] Reviewing remaining cves for 9.11-SNAPSHOT and 10.1-SNAPSHOT Docker images [solr-site] via GitHub
• 2026/08/11 [jira] [Created] (SOLR-18341) SolrJ David Smiley (Jira)
• 2026/08/11 Re: [PR] Reviewing remaining cves for 9.11-SNAPSHOT and 10.1-SNAPSHOT Docker images [solr-site] via GitHub
• 2026/08/11 Re: [PR] Reviewing remaining cves for 9.11-SNAPSHOT and 10.1-SNAPSHOT Docker images [solr-site] via GitHub
• 2026/08/11 Re: [PR] Reviewing remaining cves for 9.11-SNAPSHOT and 10.1-SNAPSHOT Docker images [solr-site] via GitHub
• 2026/08/11 Re: [PR] Reviewing remaining cves for 9.11-SNAPSHOT and 10.1-SNAPSHOT Docker images [solr-site] via GitHub
• 2026/08/11 Re: [PR] Reviewing remaining cves for 9.11-SNAPSHOT and 10.1-SNAPSHOT Docker images [solr-site] via GitHub
• 2026/08/11 [jira] [Assigned] (SOLR-17755) Official Docker Images with a horrible number of security vulnerabilities Eric Pugh (Jira)
• 2026/08/11 [jira] [Commented] (SOLR-17833) Assess expoitability of CVE-2024-7254 in dependency `protobuf-java` Eric Pugh (Jira)
• 2026/08/11 [PR] Reviewing remaining cves for 9.11-SNAPSHOT and 10.1-SNAPSHOT Docker images [solr-site] via GitHub
• 2026/08/11 [jira] [Commented] (SOLR-17841) Investigate multithreaded search performance bottlenecks Puneet Ahuja (Jira)
• 2026/08/11 Re: [PR] SOLR-18191: draft [solr] via GitHub
• 2026/08/11 [PR] SOLR-17841: Use DocSetCollector for multithreaded DocSet search [solr] via GitHub
• 2026/08/11 Re: [PR] SOLR-18312: introduce dedicated thread pool executor for httpClientBu… [solr] via GitHub

• Earlier messages
• Later messages