Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Log4j logging files in Solr are too old. Replacing with latest to avoid security concerns #313

Closed
wants to merge 3 commits into from

Conversation

g7morris
Copy link
Contributor

@g7morris g7morris commented Dec 1, 2023

WIP for upgrading LOG4J logging files that are 2.17.x vs latest 2.22.0. This is a concern for security and CVEs. Will test shortly.

@g7morris g7morris requested a review from noahwsmith December 1, 2023 21:57
@g7morris g7morris self-assigned this Dec 1, 2023
@g7morris
Copy link
Contributor Author

g7morris commented Dec 1, 2023

I will resume work on Monday and am not expecting this to work yet as I haven't attempted make bake solr to work out kinks, syntax errors etc.

@g7morris g7morris removed the request for review from noahwsmith December 1, 2023 22:01
@g7morris g7morris marked this pull request as draft December 1, 2023 22:01
@nigelgbanks
Copy link
Contributor

@joecorall raised a point that we could upgrade to Solr 9.x, maybe that's the route forward? https://islandora.slack.com/archives/C03472QEUM8/p1701358102239509

@g7morris
Copy link
Contributor Author

g7morris commented Dec 5, 2023

Okay I'll close this PR then as upgrading to Solr 9.x sounds like the community solution. @nigelgbanks or @joecorall Are either of you opening up a new issue to this effect and won't the current Drupal schema be impacted by this?

@g7morris g7morris closed this Dec 5, 2023
@g7morris g7morris deleted the solr-log4j-upgrade branch December 5, 2023 19:45
@nigelgbanks nigelgbanks mentioned this pull request Dec 7, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants