Re: 8.7 Release

2020-10-12 Thread Adrien Grand
Shall we move forward with 8.7 now that 8.6.3 is out? On Tue, Sep 22, 2020 at 9:32 PM Atri Sharma wrote: > I plan to cut the branch on 30th September. > > On Wed, 23 Sep 2020 at 00:51, Cassandra Targett > wrote: > >> >> >> >> >> >> >> >> >> >> >> >> >> Atri, >> >> >> >> >> >> Just so I understa

BadApple report

2020-10-12 Thread Erick Erickson
Mostly for historical context for a while, It includes the reference impl so the stats will be skewed from now until we integrate it all. Short form: Raw fail count by week totals, most recent week first (corresponds to bits): Week: 0 had 142 failures Week: 1 had 153 failures Week: 2 had 51

jira patch "precommit" jenkins jobs? (don't seem to be running lately)

2020-10-12 Thread Chris Hostetter
Does anyone know / un derstand the current status of the "PreCommit" jenkins jobs that are suppose to run against jira issues in the "Path Available" status? For example: I noticed this AM that even though SOLR-14870 was in the "Path Available" status all weekend (I didn't want to commit bu

Re: jira patch "precommit" jenkins jobs? (don't seem to be running lately)

2020-10-12 Thread Uwe Schindler
It no longer works since jenkins was moved to new hardware. IMHO, you should use pull requests in GitHub. There we have full support for automatic precommit. We use it every day, much easier than Jira. I'd not spend much time in reactivating it. It's dead. On Jira it's disabled since longer tim

[CVE-2020-13957] The checks added to unauthenticated configset uploads in Apache Solr can be circumvented

2020-10-12 Thread Tomas Fernandez Lobbe
Severity: High Vendor: The Apache Software Foundation Versions Affected: 6.6.0 to 6.6.5 7.0.0 to 7.7.3 8.0.0 to 8.6.2 Description: Solr prevents some features considered dangerous (which could be used for remote code execution) to be configured in a ConfigSet that's uploaded via API without auth

Re: 8.7 Release

2020-10-12 Thread Houston Putman
Adrien, I plan on merging SOLR-14907 to master and 8x tomorrow. If you would mind waiting to cut 8.7 until then, I would appreciate it. - Houston On Mon, Oct 12, 2020 at 4:59 AM Adrien Grand wrote: > Shall we move forward with 8.7 now that 8.6.