[
https://issues.apache.org/jira/browse/SOLR-16749?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17713207#comment-17713207
]
Jan Høydahl commented on SOLR-16749:
------------------------------------
There is no fixed cadence for this. See
[https://solr.apache.org/downloads.html#about-versions-and-support]
{quote}"Previous major version may sometimes receive critical bugfix releases"
{quote}
The way it goes is that whoever feels the need for a new release will
contribute back-ports of select bug fixes to the branch, and then propose a
release. A committer will then hopefully agree and volunteer as the Release
Manager, and then start the release.
There will probably not be a Jetty 10.x upgrade on 8.x, but if a newer 9.x
release is available it may be an alternative.
The proper way to ask questions like this is shown in the "Create issue"
dialogue:
{quote}"This project has a user mailing list and an IRC channel for support.
Please ensure that you have discussed your problem using one of those
[resources|http://lucene.apache.org/solr/community.html#mailing-lists-irc]
BEFORE creating this ticket."
{quote}
I'll now close this issue. Feel free to submit PRs for backporting issues, and
to propose a new release on the dev@ mailing list.
> Patching Cadence of 8.11.x
> --------------------------
>
> Key: SOLR-16749
> URL: https://issues.apache.org/jira/browse/SOLR-16749
> Project: Solr
> Issue Type: Task
> Security Level: Public(Default Security Level. Issues are Public)
> Affects Versions: 8.11.2
> Reporter: Parag Ninawe
> Priority: Major
>
> I would like to understand the patching cadence of 8.11.x version.
> There are vulnerabilities which are not fixed for 8.11.x but were only fixed
> for version 9.x.x. i.e the latest version.
> Few of the vulnerabilities which were not fixed as part of 8.11.2
> SOLR-16402
> SOLR-15955
> SOLR-16598
> SOLR-16332, SOLR-16464 (Fixed in 8.11.3, yet to be released)
>
> Can the team please help me understand the patching cadence for the version
> 8.11.x, since its still in-support but doesn't get up-to-date patches
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
