[ 
https://issues.apache.org/jira/browse/SOLR-15505?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Robert Muir resolved SOLR-15505.
--------------------------------
    Resolution: Won't Fix

Your security scanning tool is broken. Please fix it.

Please, at least read relevant CVEs before opening issues. It tells you that it 
only applies to *ICU4C*. This is a java project.

> Upgrade ICU4J to 67.1+
> ----------------------
>
>                 Key: SOLR-15505
>                 URL: https://issues.apache.org/jira/browse/SOLR-15505
>             Project: Solr
>          Issue Type: Improvement
>      Security Level: Public(Default Security Level. Issues are Public) 
>    Affects Versions: 8.6.3, 8.9
>            Reporter: Somesh Dhal
>            Priority: Major
>
> Solr 8.9.0 currently contains icu4j-62.1 which is vulnerable as 
> [CVE-2020-10531] is identified. 
> It should be updated to Min 67.1 so that this Vulnerability can be handled.
> https://nvd.nist.gov/vuln/detail/CVE-2020-10531



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@solr.apache.org
For additional commands, e-mail: issues-h...@solr.apache.org

Reply via email to