Re: Query on CVE-2021-45046

2021-12-16 Thread Ing. Andrea Vettori
Hello, yesterday I replaced the jars from 2.13.2 to 2.16 and so far no issues. — Ing. Andrea Vettori Responsabile Sistemi Informativi B2BIres s.r.l. > On 15 Dec 2021, at 18:58, Alessandro Benedetti wrote: > > I would also encourage you to do the upgrade first on QA/Staging rather > than direct

Apache Log4J CVE-2021-44228

2021-12-16 Thread Ramila Herath
Hi; In your security statement (https://solr.apache.org/security.html) it says the following Upgrade to Solr 8.11.1 or greater (when available), which will include an updated version (>= 2.16.0) of the Log4J dependency However I am unable to find a download link to 8.11.1. Latest I see it 8.11

[ANNOUNCE] Apache Solr 8.11.1 released

2021-12-16 Thread Jan Høydahl
The Lucene and Solr PMCs are pleased to announce the release of Apache Solr 8.11.1. Solr is the popular, blazing fast, open source NoSQL search platform from the Apache Solr project. Its major features include powerful full-text search, hit highlighting, faceted search, dynamic clustering, data

Re: When will solr 8.11.1 become available?

2021-12-16 Thread Ishan Chattopadhyaya
It is available now. On Tue, Dec 14, 2021 at 7:36 AM Shawn Heisey wrote: > On 12/13/2021 4:12 PM, Andy Lester wrote: > >> It is impossible to give you an accurate prediction for the release > date of Solr 8.11.1. > > > > It sounds like it’s safe to say that the release will be “on the order > of

Re: When will solr 8.11.1 become available?

2021-12-16 Thread Carlos Cueto
Any idea when it will be available on Docker Hub? 8.11.1 tag is still not added. On Thu, Dec 16, 2021 at 9:25 AM Ishan Chattopadhyaya < ichattopadhy...@gmail.com> wrote: > It is available now. > > On Tue, Dec 14, 2021 at 7:36 AM Shawn Heisey wrote: > > > On 12/13/2021 4:12 PM, Andy Lester wrote:

Log4j remediation in the Docker image

2021-12-16 Thread Andy Lester
> On Dec 16, 2021, at 8:26 AM, Carlos Cueto wrote: > > Any idea when it will be available on Docker Hub? 8.11.1 tag is still not > added. I don’t know, but yesterday I went and changed my build process for our Docker image of Solr to delete the JNDI classes from the jar files as a stopgap un

How do I determine which hardware device and software has log4j zero-day security vulnerability?

2021-12-16 Thread Turritopsis Dohrnii Teo En Ming
Subject: How do I determine which hardware device and software has log4j zero-day security vulnerability? Good day from Singapore, I am working for a Systems Integrator (SI) in Singapore. We have several clients writing in, requesting us to identify log4j zero-day security vulnerability in their

Re: Read-only user in solr not working as expected

2021-12-16 Thread Timothy Potter
Try adding the "all" permission with the "admin" role assigned (in the last position in the permission list). Having all explicitly defined (and last) will cover all other permissions that aren't explicitly defined in your config. On Wed, Dec 15, 2021 at 2:05 AM Martin Schober wrote: > > Dear sol

null pointer exception for solr package management v8.11.0

2021-12-16 Thread andrew goh
hi all, I'm a newbie to solr, need some help. While i'm trying to use solr 8.11.0. after starting solr with bin/solr -Denable.packages=true All the commands with package management bin/solr package cmd ends with a null pointer exception. Is there any way to resolve this? Thanks in advance,

Re: null pointer exception for solr package management v8.11.0

2021-12-16 Thread Timothy Potter
Does passing the -zkHost option to the package command help? On Thu, Dec 16, 2021 at 10:52 AM andrew goh wrote: > > hi all, > > I'm a newbie to solr, need some help. > > While i'm trying to use solr 8.11.0. after starting solr with > bin/solr -Denable.packages=true > > All the commands with pack

SOLR Version 8.5.1- java.io.IOException: Request processing has stalled for X ms with N remaining elements in the queue.

2021-12-16 Thread Nikhilesh Jannu
Hi Team, Looking for some guidance here. One of our SOLR Cloud cluster has started showing lot of errors related to java.io.IOException: Request processing has stalled for 20029ms with 100 remaining elements in the queue. Based on our analysis as the requests are getting stalled we are seeing a

Re: null pointer exception for solr package management v8.11.0

2021-12-16 Thread andrew goh
hi Timothy, Thanks for your response ! When I run solr package -h i got: bin/solr package -h Failed to parse command-line arguments due to: Unrecognized option: -h usage: org.apache.solr.util.SolrCLI  -c,--collection  The collection to apply the package to, not   

Re: Apache Log4J CVE-2021-44228

2021-12-16 Thread Shawn Heisey
On 12/16/2021 2:09 AM, Ramila Herath wrote: However I am unable to find a download link to 8.11.1. Latest I see it 8.11.0. please confirm where to download 8.11.1 from One of these URLs should work, depending on what OS you want to extract on: https://www.apache.org/dyn/closer.lua/lucene/solr/

Re: SOLR Version 8.5.1- java.io.IOException: Request processing has stalled for X ms with N remaining elements in the queue.

2021-12-16 Thread Shawn Heisey
On 12/16/2021 1:22 PM, Nikhilesh Jannu wrote: One of our SOLR Cloud cluster has started showing lot of errors related to java.io.IOException: Request processing has stalled for 20029ms with 100 remaining elements in the queue. The error message will have significantly more detail than that. W

Re: When will solr 8.11.1 become available?

2021-12-16 Thread David Smiley
https://github.com/docker-solr/docker-solr/pull/401 I would guess perhaps in 12 hours from now maybe. ~ David Smiley Apache Lucene/Solr Search Developer http://www.linkedin.com/in/davidwsmiley On Thu, Dec 16, 2021 at 9:26 AM Carlos Cueto wrote: > Any idea when it will be available on Docker Hu

Re: SOLR Version 8.5.1- java.io.IOException: Request processing has stalled for X ms with N remaining elements in the queue.

2021-12-16 Thread Nikhilesh Jannu
Hi Shawn, Thanks for the response. Based on the questions you have provided I have collected the following data. a. This is the stack trace : 2021-12-16 18:05:11.834 ERROR (qtp1765690649-66565) [c:ss s:shard1 r:core_node24 x:ss_shard1_replica_n23] o.a.s.u.SolrCmdDistributor java.io.IOException: