Author: jleroux Date: Wed May 30 11:04:35 2018 New Revision: 1832533 URL: http://svn.apache.org/viewvc?rev=1832533&view=rev Log: Improved: Update Solr and Lucene from 7.2.1 to Solr 7.3.1 for security reason (CVE-2018-8010) (OFBIZ-10415)
I'm not sure we are affected but better be safe than sorry see SOLR-12316 https://wiki.apache.org/solr/SolrSecurity https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8010 The Lucene and Solr tests pass Modified: ofbiz/ofbiz-plugins/trunk/lucene/build.gradle ofbiz/ofbiz-plugins/trunk/solr/build.gradle Modified: ofbiz/ofbiz-plugins/trunk/lucene/build.gradle URL: http://svn.apache.org/viewvc/ofbiz/ofbiz-plugins/trunk/lucene/build.gradle?rev=1832533&r1=1832532&r2=1832533&view=diff ============================================================================== --- ofbiz/ofbiz-plugins/trunk/lucene/build.gradle (original) +++ ofbiz/ofbiz-plugins/trunk/lucene/build.gradle Wed May 30 11:04:35 2018 @@ -17,7 +17,7 @@ * under the License. */ dependencies { - pluginLibsCompile 'org.apache.lucene:lucene-core:7.2.1' // Remember to change the version number in SearchWorker class when upgrading. Also Solr et Lucene should use the same version - pluginLibsCompile 'org.apache.lucene:lucene-queryparser:7.2.1' - pluginLibsCompile 'org.apache.lucene:lucene-analyzers-common:7.2.1' + pluginLibsCompile 'org.apache.lucene:lucene-core:7.3.1' // Remember to change the version number in SearchWorker class when upgrading. Also Solr et Lucene should use the same version + pluginLibsCompile 'org.apache.lucene:lucene-queryparser:7.3.1' + pluginLibsCompile 'org.apache.lucene:lucene-analyzers-common:7.3.1' } \ No newline at end of file Modified: ofbiz/ofbiz-plugins/trunk/solr/build.gradle URL: http://svn.apache.org/viewvc/ofbiz/ofbiz-plugins/trunk/solr/build.gradle?rev=1832533&r1=1832532&r2=1832533&view=diff ============================================================================== --- ofbiz/ofbiz-plugins/trunk/solr/build.gradle (original) +++ ofbiz/ofbiz-plugins/trunk/solr/build.gradle Wed May 30 11:04:35 2018 @@ -17,7 +17,7 @@ * under the License. */ dependencies { - pluginLibsCompile 'org.apache.solr:solr-core:7.2.1' // Remember to change the version number in SearchWorker class when upgrading. Also Solr et Lucene should use the same version + pluginLibsCompile 'org.apache.solr:solr-core:7.3.1' // Remember to change the version number in SearchWorker class when upgrading. Also Solr et Lucene should use the same version pluginLibsCompile 'com.google.guava:guava:20.0' }
