Re: Unknown CVEs in 8.11.2?

2023-10-02 Thread Jamie Jackson
Hello, Can anybody suggest a way to get some attention to these issues? I thought this was the right place for CVE discussion but maybe I was wrong about that. Thanks, Jamie On Mon, Sep 18, 2023 at 1:30 PM Jamie Jackson wrote: > Hello, > > If I'm understanding everything correc

Re: Unknown CVEs in 8.11.2?

2023-10-02 Thread Jamie Jackson
a vulnerability to > Solr? Often times, Solr uses multiple external dependencies that may have > vulnerabilities that can't be exploited through Solr, and those > vulnerabilities are of less concern to Solr in terms of urgency to address > it. > > On Mon, 2 Oct, 2023, 10:05 pm J

Re: Unknown CVEs in 8.11.2?

2023-10-23 Thread Jamie Jackson
, so wasn't able to upgrade the Hadoop dependency, > though. > My naive attempt to just increase the Hadoop library version resulted in > several failed tests that I wasn't able to debug. > > On Tue, 3 Oct 2023 at 01:33, Jamie Jackson wrote: > > > The nice thing