[ https://issues.apache.org/jira/browse/SOLR-15505?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Robert Muir resolved SOLR-15505. -------------------------------- Resolution: Won't Fix Your security scanning tool is broken. Please fix it. Please, at least read relevant CVEs before opening issues. It tells you that it only applies to *ICU4C*. This is a java project. > Upgrade ICU4J to 67.1+ > ---------------------- > > Key: SOLR-15505 > URL: https://issues.apache.org/jira/browse/SOLR-15505 > Project: Solr > Issue Type: Improvement > Security Level: Public(Default Security Level. Issues are Public) > Affects Versions: 8.6.3, 8.9 > Reporter: Somesh Dhal > Priority: Major > > Solr 8.9.0 currently contains icu4j-62.1 which is vulnerable as > [CVE-2020-10531] is identified. > It should be updated to Min 67.1 so that this Vulnerability can be handled. > https://nvd.nist.gov/vuln/detail/CVE-2020-10531 -- This message was sent by Atlassian Jira (v8.3.4#803005) --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@solr.apache.org For additional commands, e-mail: issues-h...@solr.apache.org