RE: Solr - Spring cloud – CVE-2022-22963

2022-04-15 Thread Rajath Banagi Ravindra
Hi All, Any update regarding the below request, Thanks in Advance, Regards Rajath From: Rajath Banagi Ravindra Sent: Tuesday, April 5, 2022 9:19 AM To: Aman Tandon ; users@solr.apache.org Subject: Solr - Spring cloud – CVE-2022-22963 Importance: High Hi, We are using Solr 7.5 version and

Solr - Spring cloud – CVE-2022-22963

2022-04-05 Thread Rajath Banagi Ravindra
Hi, We are using Solr 7.5 version and Solr 6.4 version in our applications. Wanted to check if there is any impact due to vulnerability - CVE-2022-22963. I did googling and didn’t find any clear answers regarding same. Are Solr instances vulnerable and any action needed from our end, please let

Re: Solr 7.5 log4j fix

2022-01-06 Thread Rajath Banagi Ravindra
Thanks Aman for quick update, Regards Rajath From: Aman Tandon Sent: Thursday, January 6, 2022 6:16 AM To: Rajath Banagi Ravindra Cc: users@solr.apache.org Subject: Re: Solr 7.5 log4j fix * This e-mail originated outside of Mindtree. Exercise caution before

Solr 7.5 log4j fix

2022-01-06 Thread Rajath Banagi Ravindra
Hi, I have once question regarding the Log4J vulnerability fix for 7.5 version of solr. We have updated Log4J file with latest version of log4j 2.17.1 and solr is loading fine. Do we need to add the below config also, please confirm, * (Windows) Edit your solr.in.cmd file to include: set S

RE: Solr 6.6.1 Log4J fix

2022-01-01 Thread Rajath Banagi Ravindra
ilable; Upgrade to version 2.17.0) Regards Rajath From: Aman Tandon Sent: Wednesday, December 29, 2021 7:36 PM To: users@solr.apache.org; Rajath Banagi Ravindra Subject: Re: Solr 6.6.1 Log4J fix * This e-mail originated outside of Mindtree. Exercise caution before clicking links or opening

Solr 6.6.1 Log4J fix

2021-12-29 Thread Rajath Banagi Ravindra
Hi, Currently our application uses Solr 6.6.1 version which uses Log4j version 1.2.17 in it. Can we upgrade it to new version of Log4J. Can we just update Log4j JAR file(1.2.17 version) with a new version of Log4J JAR file instead of updating Solr. Will this work? Kindly confirm. Regards-Rajat