I threw up a PR for a backport: https://github.com/apache/lucene-solr/pull/2676
Jan > 20. jan. 2023 kl. 16:00 skrev Joseph Gonzalez <jgonza...@reingold.com>: > > Hello, > > I saw that Netty 4.1.87.Final was brought into SOLR 9.2 via > https://issues.apache.org/jira/browse/SOLR-16626. > > Can that change be backported to Solr 8.11.3 to resolve CVE-2022-41881? > > Thanks, > > Joe