[ https://issues.apache.org/jira/browse/OAK-6412?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17514499#comment-17514499 ]
Marco Piovesana commented on OAK-6412: -------------------------------------- Hi, there is any plan for updating lucene version? As mentioned [here|https://nvd.nist.gov/vuln/detail/CVE-2017-12629] the version currently used has critical vulnerabilites. Marco. > Consider upgrading to newer Lucene versions > ------------------------------------------- > > Key: OAK-6412 > URL: https://issues.apache.org/jira/browse/OAK-6412 > Project: Jackrabbit Oak > Issue Type: Improvement > Components: lucene > Reporter: Tommaso Teofili > Assignee: Tommaso Teofili > Priority: Major > > An year ago I had started prototyping the upgrade to Lucene 5 [1], in the > meantime version 6 (and 7 soon) has come out. > I think it'd be very nice to upgrade Lucene version to the latest, this would > give us improvements in space consumption and runtime performance. > In case we want to upgrade to 6.0 or later we need to consider upgrade > scenarios because Lucene Codecs are backward compatible with the previous > major release, so Lucene 6 can read Lucene 5 but not Lucene 4.x (4.7 in our > case) therefore we would need to detect that when reading an index and > trigger reindexing using the new format. > Related to that there's also a patch to upgrade Solr index to version 5 (see > OAK-4318). > [1] : https://github.com/tteofili/jackrabbit-oak/tree/lucene5 -- This message was sent by Atlassian Jira (v8.20.1#820001)