I think Jun He would be the one to have more comprehensive answer to you. Also we need our RM Kengo Seki's input here.
in general, I'm with you that we should upgrade to newer version of Solr. I'm guessing that if you can help on the contribution for the issues of version bumping, we'd be happy to bump it up. LE BOUTER Leo <leo.lebouter-...@aphp.fr> 於 2020年3月12日 週四 上午4:50寫道： > Hello! > > We're looking into migrating our Hadoop installation to Bigtop, but > currently we use Apache Solr 8.x - I have read inside JIRA that you are > planning to upgrade to 6.6.6 in the next release, but that is an old, > upstream unsupported version with known security vulnerabilities. > > JIRA issue: > > https://issues.apache.org/jira/browse/BIGTOP-3123?focusedCommentId=17038785&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-17038785 > > Security vulnerability: > https://issues.apache.org/jira/browse/SOLR-13669 > > To keep our Hadoop installation secure and benefit from the latest > features and performance improvements, we like to stay close to > upstream stable releases. > > What currently prevents Apache Bigtop from distributing Apache Solr > 8.x? > > I think Bigtop can be a strong vendor-independent base for our > deployment. I'd like to work towards making Bigtop a good fit for our > use case. > Indeed, this is exactly what we position ourselves. And we're a very open community so feel free to contribute anything including but not limited to code, doc, bug report, question, mailing list participation, etc... > > Thank you > > -- > Leo Le Bouter <leo.lebouter-...@aphp.fr> > Entrepot de Donnees de Sante (WIND) > Ingenieur Securite Infrastructure >
