David Smiley created SOLR-16598:
-----------------------------------
Summary: Patch/upgrade Protobuf to fix CVEs
Key: SOLR-16598
URL: https://issues.apache.org/jira/browse/SOLR-16598
Project: Solr
Issue Type: Improvement
Security Level: Public (Default Security Level. Issues are Public)
Reporter: David Smiley
Protobuf is used in several of Solr's modules (but not its core). Lets bump
the patch level of the version to mitigate recent CVEs found in 3.21.4:
https://nvd.nist.gov/vuln/detail/CVE-2022-3171
https://nvd.nist.gov/vuln/detail/CVE-2022-3509
https://nvd.nist.gov/vuln/detail/CVE-2022-3510
(disclaimer: I haven't investigated these for Solr's susceptibility)
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
