Re: Apache zookeeper jar upgrade for SOLR

Hi Jan, Thank you so much for your answers. Yes . I agree we are running very old version of SOLR. We decided to upgrade SOLR to 7.x version. -- Sent from: http://lucene.472066.n3.nabble.com/Solr-User-f472068.html

Apache SOLR upgrade from 5.2.1 to 7.x

Hi Team, We planning to upgrade SOLR from 5.2.1 to 7.x version. I just googled and found that there is no way of upgrading from 5.x to 7.x directly Here are the list of suggestions gathered from different sources 1. We cannot upgrade directly from 5.x to 7.x instead upgrade to 5.5 then upgrad

Apache zookeeper jar upgrade for SOLR

Hi Team, We are using Apache SOLR-5.2.1 and Zookeeper-3.4.5 is it good idea to upgrade zookeeper-3.4.5.jar to zookeeper-3.4.10.jar for SOLR-5.2.1 version is there any impact to upgrade specific libraries for Apache SOLR instead of full upgrade? Thanks, Padmanabhan -- Sent from: http://lucene

Apche SOLR httpclient library upgrade

Hi Team, We are planning to upgrade httpclient-4.3.1.jar to httpclient-4.3.6.jar as it covers some of security vulnerabilities. Is it good idea to upgrade httpclient jar alone? Thanks, Padmanabhan -- Sent from: http://lucene.472066.n3.nabble.com/Solr-User-f472068.html

Re: Apache commons fileupload migration

Yes I read the changelog 1.3.3. This release contains the security vulnerability fix. DiskDileItem can actually no longer be deserialized, *unless a system property is set to true*. Fixes FILEUPLOAD-279. We don't have security architecture for my product to decide weather it is vulnerable or not

Apache commons fileupload migration

Hi Team,We are using Apache SOLR-5.2.1 as index engine for our data analytics application. As part of this SOLR uses commons-fileupload-1.2.1.jar for file manipulation.There is security Vulnerability identified in commons-fileupload library: *CVE-2016-131 Apache Commons FileUpload: DiskFileItem