Messages by Thread
-
[jira] [Updated] (SOLR-18152) Cosmetic improvements and migration to JAX-RS (v2 schemadesigner API)
ASF GitHub Bot (Jira)
-
Re: [PR] SOLR-18152: Migrate Schema Designer to JAX-RS Apis. Fix some bugs. [solr]
via GitHub
-
[PR] Bump netty from 4.2.15.Final to 4.2.17.Final [solr]
via GitHub
-
[jira] [Commented] (SOLR-18342) Upgrade to Gradle 9.7.0
ASF subversion and git services (Jira)
-
Re: [PR] Update Web server stack to v4 (branch_9x) [solr]
via GitHub
-
[PR] Move branch9x solrbot to monthly run [solr]
via GitHub
-
Re: [PR] Update all non-major test dependencies (branch_9x) [solr]
via GitHub
-
[PR] TIdy cross DC code. The application and the solr module. [solr]
via GitHub
-
[PR] Review and tidy ./solr/modules code [solr]
via GitHub
-
[PR] Prevent command injection via SolrBackup.spec.location [solr-operator]
via GitHub
-
[jira] [Resolved] (SOLR-17571) Introduce dependabot
Christos Malliaridis (Jira)
-
[jira] [Commented] (SOLR-18346) Leader-to-replica update retry depends on which exception the client reports outermost
ASF subversion and git services (Jira)
-
[jira] [Resolved] (SOLR-18334) PRS collection creation returns too early; can cause restore failure
David Smiley (Jira)
-
[PR] SOLR-17444: Add Passage Sorting Option in UnifiedSolrHighlighter [solr]
via GitHub
-
[jira] (SOLR-18250) Fix GCS backup copyIndexFileTo silently swallowing exceptions and prematurely terminating reads
Prithvi S (Jira)
-
[jira] [Updated] (SOLR-18348) `buildOnCommit=true` suggester rebuild blocks commit (and the client request) indefinitely with no timeout
ASF GitHub Bot (Jira)
-
[PR] SOLR-18348: Move building suggester to async process outside of commit lifecycle. [solr]
via GitHub
-
[PR] Fix formatting of commit and optimize operation tags [solr]
via GitHub
-
[jira] [Updated] (SOLR-18349) Use v2 of runComposeUiTest in the new ui tests
ASF GitHub Bot (Jira)
-
[PR] SOLR-18349: Use v2 of runComposeUiTest in the new ui tests [solr]
via GitHub
-
[jira] [Created] (SOLR-18349) Use v2 of runComposeUiTest in the new ui tests
Jane Sandberg (Jira)
-
[jira] [Commented] (SOLR-18348) `buildOnCommit=true` suggester rebuild blocks commit (and the client request) indefinitely with no timeout
Eric Pugh (Jira)
-
[jira] [Created] (SOLR-18348) `buildOnCommit=true` suggester rebuild blocks commit (and the client request) indefinitely with no timeout
Eric Pugh (Jira)
-
[PR] SOLR-17697: Implement picocli for package command / PackageTool [solr]
via GitHub
-
[jira] [Updated] (SOLR-11213) Update Jetty version to deal with CVE-2017-9735
Gus Heck (Jira)
-
[PR] Fix regenerator: repackaged jar's embedded Maven metadata misattributed to the artifact [solr-site]
via GitHub
-
[jira] [Updated] (SOLR-18347) Possible AdminUI bugs found by Selenium
Jira
-
[jira] [Created] (SOLR-18347) Possible AdminUI bugs found by Selenium
Jira
-
[jira] [Resolved] (SOLR-13162) Admin UI development-test cycle is slow
Jira
-
[jira] [Resolved] (SOLR-8473) Test Framework for Unit Testing Angular UI
Jira
-
[jira] [Updated] (SOLR-8474) Test Framework for functional testing Angular UI
ASF GitHub Bot (Jira)
-
[PR] SOLR-8474: Add Selenium-based JUnit tests for the Admin UI [solr]
via GitHub
-
[jira] [Commented] (SOLR-8474) Test Framework for functional testing Angular UI
Jira
-
[jira] [Assigned] (SOLR-8474) Test Framework for functional testing Angular UI
Jira
-
[PR] Bump apache-log4j from 2.26.0 to 2.26.1 [solr]
via GitHub
-
[jira] [Resolved] (SOLR-18256) Auto-fix pure negative (NOT) clauses in the "lucene" QParser
David Smiley (Jira)
-
[PR] Fix renovate pin for consistent-versions plugin on branch_9x [solr]
via GitHub
-
[PR] Cap CVE-2025-48734 (commons-beanutils) range at 9.10.1/10.0.0 — fixed in 9.11/10.1 [solr-site]
via GitHub
-
[jira] [Resolved] (SOLR-10702) Woodstox API
Eric Pugh (Jira)
-
[jira] [Resolved] (SOLR-18013) Upgrade lz4 jar to fix CVE-2025-12183 and CVE-2025-66566
Eric Pugh (Jira)
-
[jira] [Resolved] (SOLR-13309) Add FieldTypes for Lucene IntRange, LongRange, FloatRange, DoubleRange
Jason Gerlowski (Jira)
-
[jira] [Resolved] (SOLR-18201) "Range Field" types should have docValues support and associated optimizations
Jason Gerlowski (Jira)
-
[jira] [Commented] (SOLR-13309) Add FieldTypes for Lucene IntRange, LongRange, FloatRange, DoubleRange
ASF subversion and git services (Jira)
-
[jira] [Commented] (SOLR-13309) Add FieldTypes for Lucene IntRange, LongRange, FloatRange, DoubleRange
ASF subversion and git services (Jira)
-
[jira] [Commented] (SOLR-13309) Add FieldTypes for Lucene IntRange, LongRange, FloatRange, DoubleRange
ASF subversion and git services (Jira)
-
[jira] [Commented] (SOLR-13309) Add FieldTypes for Lucene IntRange, LongRange, FloatRange, DoubleRange
ASF subversion and git services (Jira)
-
[jira] [Commented] (SOLR-13309) Add FieldTypes for Lucene IntRange, LongRange, FloatRange, DoubleRange
ASF subversion and git services (Jira)
-
[PR] Split lz4-java CVEs by fix boundary and emit a matchable org.lz4 purl [solr-site]
via GitHub
-
[PR] SOLR-16309: Bump jquery ui to deal with some older cve's [solr]
via GitHub
-
[jira] [Reopened] (SOLR-13309) Add FieldTypes for Lucene IntRange, LongRange, FloatRange, DoubleRange
Jason Gerlowski (Jira)
-
[jira] [Resolved] (SOLR-18333) upgrade jackson-databind to 2.21.5 to fix CVE-2026-54518, CVE-2026-59889, CVE-2026-54515
Eric Pugh (Jira)
-
[PR] Split bundled 2026 jackson-databind VEX entry into per-CVE files with accurate ranges [solr-site]
via GitHub
-
[jira] [Updated] (SOLR-18346) Leader-to-replica update retry depends on which exception the client reports outermost
ASF GitHub Bot (Jira)
-
[jira] [Created] (SOLR-18346) Leader-to-replica update retry depends on which exception the client reports outermost
Serhiy Bzhezytskyy (Jira)
-
[PR] Pin dependencies to java 11 for Solrbot [solr]
via GitHub
-
[jira] [Resolved] (SOLR-17236) Update jackson-databind for 8.11.x
Eric Pugh (Jira)
-
[PR] Refine jackson-databind gadget CVE range to 4.7.0-8.6.3 [solr-site]
via GitHub
-
[jira] [Resolved] (SOLR-15507) Upgrade Apache Thrift to 0.14.1
Eric Pugh (Jira)
-
[PR] Correct CVE-2020-13949 (thrift) affected range to 8.2.0-8.11.0 [solr-site]
via GitHub
-
[jira] [Resolved] (SOLR-17900) Multiple CVEs in Apache Hadoop Client Runtime 3.4.0 dependency
Eric Pugh (Jira)
-
[PR] SOLR-17900 follow-up: narrow four Hadoop-shaded CVE ranges to 9.0.0-9.9.0 [solr-site]
via GitHub
-
[PR] SOLR-18332: More 'qt' removal, rd 4 [solr]
via GitHub
-
Re: [PR] SOLR-18332: More 'qt' removal, rd 4 [solr]
via GitHub
-
Re: [PR] SOLR-18332: More 'qt' removal, rd 4 [solr]
via GitHub
-
Re: [PR] SOLR-18332: More 'qt' removal, rd 4 [solr]
via GitHub
-
Re: [PR] SOLR-18332: More 'qt' removal, rd 4 [solr]
via GitHub
-
Re: [PR] SOLR-18332: More 'qt' removal, rd 4 [solr]
via GitHub
-
Re: [PR] SOLR-18332: More 'qt' removal, rd 4 [solr]
via GitHub
-
Re: [PR] SOLR-18332: More 'qt' removal, rd 4 [solr]
via GitHub
-
Re: [PR] SOLR-18332: More 'qt' removal, rd 4 [solr]
via GitHub
-
Re: [PR] SOLR-18332: More 'qt' removal, rd 4 [solr]
via GitHub
-
Re: [PR] SOLR-18332: More 'qt' removal, rd 4 [solr]
via GitHub
-
Re: [PR] SOLR-18332: More 'qt' removal, rd 4 [solr]
via GitHub
-
Re: [PR] SOLR-18332: More 'qt' removal, rd 4 [solr]
via GitHub
-
[jira] [Resolved] (SOLR-17901) CVE-2024-21742: vulnerability in apache-mime4j-core 0.8.4 dependency
Eric Pugh (Jira)
-
[jira] [Resolved] (SOLR-17899) CVE-2024-30171, CVE-2024-30172, CVE-2024-29857, CVE-2023-33201 : vulnerabilities in Bouncy Castle provider 1.70 dependency
Eric Pugh (Jira)
-
[jira] [Updated] (SOLR-17901) CVE-2024-21742: vulnerability in apache-mime4j-core 0.8.4 dependency
ASF GitHub Bot (Jira)
-
[jira] [Resolved] (SOLR-17903) CVE-2025-31672: vulnerability in poi-ooxml 5.2.2 dependency
Eric Pugh (Jira)
-
[PR] SOLR-18345: ClientUtils.encodeLocalParamVal fix for \, ', " [solr]
via GitHub
-
[jira] [Commented] (SOLR-18345) ClientUtils.encodeLocalParamVal() can produces lossy/invalid encodings
David Smiley (Jira)
-
[jira] [Updated] (SOLR-18345) ClientUtils.encodeLocalParamVal() can produces lossy/invalid encodings
David Smiley (Jira)
-
[jira] [Created] (SOLR-18345) ClientUtils.encodeLocalParamVal() can produces lossy/invalid encodings
David Smiley (Jira)
-
[jira] [Commented] (SOLR-18344) Backup status is not reported on /replication?command=details until the backup completes
Eric Pugh (Jira)
-
[jira] [Created] (SOLR-18344) Backup status is not reported on /replication?command=details until the backup completes
Idan Tepper (Jira)
-
[jira] [Updated] (SOLR-18344) Backup status is not reported on /replication?command=details until the backup completes
ASF GitHub Bot (Jira)
-
[PR] SOLR-18344: Report in-progress backup status on /replication?command=details [solr]
via GitHub
-
[jira] [Created] (SOLR-18343) SolrJ: require an explicit HTTP method on admin requests; stop defaulting to GET
David Smiley (Jira)
-
[PR] SOLR-18342: Upgrade Gradle build to 9.7.0 [solr]
via GitHub
-
[jira] [Updated] (SOLR-18342) Upgrade to Gradle 9.7.0
ASF GitHub Bot (Jira)
-
[jira] [Created] (SOLR-18342) Upgrade to Gradle 9.7.0
Serhiy Bzhezytskyy (Jira)
-
[jira] [Commented] (SOLR-18250) Fix GCS backup copyIndexFileTo silently swallowing exceptions and prematurely terminating reads
Prithvi (Jira)
-
[jira] [Assigned] (SOLR-18250) Fix GCS backup copyIndexFileTo silently swallowing exceptions and prematurely terminating reads
Eric Pugh (Jira)
-
[jira] [Updated] (SOLR-18250) Fix GCS backup copyIndexFileTo silently swallowing exceptions and prematurely terminating reads
ASF GitHub Bot (Jira)
-
[PR] GCSBackupRepository.copyIndexFileTo must not swallow failures [solr]
via GitHub
-
[jira] [Resolved] (SOLR-18288) Document non-exploitability of Log4j CVE-2026-34477 through -34481 in Solr 9.10.1
Eric Pugh (Jira)
-
[jira] [Resolved] (SOLR-2054) Remove StAX libraries from trunk (java6)
Eric Pugh (Jira)
-
[jira] [Commented] (SOLR-15425) Upgrade to Metrics 4.2.0
Eric Pugh (Jira)
-
[jira] [Resolved] (SOLR-15497) Broken external web links in RefGuide
Eric Pugh (Jira)
-
[jira] [Commented] (SOLR-11953) Include JTS with Solr
Eric Pugh (Jira)
-
[jira] [Commented] (SOLR-8885) Update JS lib versions
Eric Pugh (Jira)
-
[jira] [Updated] (SOLR-8885) Update JS lib versions
Eric Pugh (Jira)
-
[jira] [Resolved] (SOLR-3958) Solr should log a warning when old healthcheck method configured
Eric Pugh (Jira)
-
[jira] [Updated] (SOLR-10702) Woodstox API
ASF GitHub Bot (Jira)
-
[jira] [Commented] (SOLR-17571) Introduce dependabot
Eric Pugh (Jira)
-
[PR] SOLR-10702: Document that in 9.0 and 9.1 we had exploitable CVE for woodstox [solr-site]
via GitHub
-
[jira] [Commented] (SOLR-10702) Woodstox API
Eric Pugh (Jira)
-
[jira] [Assigned] (SOLR-10702) Woodstox API
Eric Pugh (Jira)
-
[jira] [Updated] (SOLR-15507) Upgrade Apache Thrift to 0.14.1
ASF GitHub Bot (Jira)
-
[PR] SOLR-15507: docuemnt that this was fixed "back in the day" [solr-site]
via GitHub
-
[jira] [Commented] (SOLR-15507) Upgrade Apache Thrift to 0.14.1
Eric Pugh (Jira)
-
[jira] [Assigned] (SOLR-15507) Upgrade Apache Thrift to 0.14.1
Eric Pugh (Jira)
-
[PR] Wire up NVD API key for the owasp Gradle task [solr]
via GitHub
-
[jira] [Resolved] (SOLR-18052) Complete Major changes and Upgrade Notes in RefGuide for 10.0.0
Eric Pugh (Jira)
-
[jira] [Resolved] (SOLR-13959) Upgrade log4j2 to the current version, presently 2.12.1
Eric Pugh (Jira)
-
[jira] [Resolved] (SOLR-2407) investigate upgrading easymock to a newer version
Eric Pugh (Jira)
-
Re: [PR] SOLR-18158: Upgrade cuVS to 26.02 [solr]
via GitHub
-
[jira] [Commented] (SOLR-17602) Maintain final JAR dependencies in source control to track changes
Eric Pugh (Jira)
-
[jira] [Commented] (SOLR-16309) Upgrade vulnerable jQuery UI to version 1.13.2
Eric Pugh (Jira)
-
[jira] [Updated] (SOLR-16309) Upgrade vulnerable jQuery UI to version 1.13.2
ASF GitHub Bot (Jira)
-
[PR] SOLR-16309: document the jquery-ui CVE applicablity. [solr-site]
via GitHub
-
[jira] [Commented] (SOLR-18013) Upgrade lz4 jar to fix CVE-2025-12183 and CVE-2025-66566
Eric Pugh (Jira)
-
[jira] [Assigned] (SOLR-18013) Upgrade lz4 jar to fix CVE-2025-12183 and CVE-2025-66566
Eric Pugh (Jira)
-
[jira] [Updated] (SOLR-18013) Upgrade lz4 jar to fix CVE-2025-12183 and CVE-2025-66566
ASF GitHub Bot (Jira)
-
[PR] SOLR-18013: Expand existing file with additional CVES for lz4 [solr-site]
via GitHub
-
[jira] [Updated] (SOLR-17899) CVE-2024-30171, CVE-2024-30172, CVE-2024-29857, CVE-2023-33201 : vulnerabilities in Bouncy Castle provider 1.70 dependency
ASF GitHub Bot (Jira)
-
[jira] [Commented] (SOLR-18333) upgrade jackson-databind to 2.21.5 to fix CVE-2026-54518, CVE-2026-59889, CVE-2026-54515
Eric Pugh (Jira)
-
[jira] [Assigned] (SOLR-18333) upgrade jackson-databind to 2.21.5 to fix CVE-2026-54518, CVE-2026-59889, CVE-2026-54515
Eric Pugh (Jira)
-
[jira] [Updated] (SOLR-17900) Multiple CVEs in Apache Hadoop Client Runtime 3.4.0 dependency
ASF GitHub Bot (Jira)
-
[PR] SOLR-18333: Document the CVE, it's already partly covered in this existing file [solr-site]
via GitHub
-
[jira] [Commented] (SOLR-17899) CVE-2024-30171, CVE-2024-30172, CVE-2024-29857, CVE-2023-33201 : vulnerabilities in Bouncy Castle provider 1.70 dependency
Eric Pugh (Jira)
-
[jira] [Updated] (SOLR-17236) Update jackson-databind for 8.11.x
ASF GitHub Bot (Jira)
-
[PR] SOLR-17236 : Expand the details to link to a Solr JIRA that highlights the same issue. [solr-site]
via GitHub