[jira] [Comment Edited] (OFBIZ-7026) Remove duplicated jars under solr component

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

[jira] [Comment Edited] (OFBIZ-7026) Remove duplicated jars under solr component

Nicolas Malin (Jira)

    [ https://issues.apache.org/jira/browse/OFBIZ-7026?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15266372#comment-15266372 ]

Jacques Le Roux edited comment on OFBIZ-7026 at 5/2/16 10:41 AM:
-----------------------------------------------------------------

Thanks Jinghai,

The hadoop jars have been upgraded from 2.6.0 to 2.7.2 to avoid https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1776. in
trunk r1741942
R15.12 r1741943

I'm updating the "About OWASP Dependency Check" wiki page



was (Author: jacques.le.roux):
Thanks Jinghai,

The hadoop jars have been upgraded from 2.6.0 to 2.7.2 in
trunk r1741942
R15.12 r1741943

I'm updating the "About OWASP Dependency Check" wiki page


> Remove duplicated jars under solr component
> -------------------------------------------
>
>                 Key: OFBIZ-7026
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-7026
>             Project: OFBiz
>          Issue Type: Sub-task
>          Components: framework, specialpurpose/solr
>    Affects Versions: Upcoming Branch, Release Branch 15.12
>            Reporter: Shi Jinghai
>            Assignee: Shi Jinghai
>            Priority: Trivial
>             Fix For: 15.12.01
>
>
> Jacques found the following jars duplicated:
> ./specialpurpose/solr/lib/runtime/joda-time-2.2.jar
> ./specialpurpose/solr/webapp/solr/WEB-INF/lib/joda-time-2.2.jar
>  
> ./specialpurpose/solr/lib/runtime/lucene-codecs-5.3.1.jar
> ./specialpurpose/solr/webapp/solr/WEB-INF/lib/lucene-codecs-5.3.1.jar
> ./specialpurpose/solr/lib/runtime/lucene-highlighter-5.3.1.jar
> ./specialpurpose/solr/webapp/solr/WEB-INF/lib/lucene-highlighter-5.3.1.jar
> ./specialpurpose/solr/lib/runtime/lucene-join-5.3.1.jar
> ./specialpurpose/solr/webapp/solr/WEB-INF/lib/lucene-join-5.3.1.jar
> ./specialpurpose/solr/lib/runtime/lucene-queries-5.3.1.jar
> ./specialpurpose/solr/webapp/solr/WEB-INF/lib/lucene-queries-5.3.1.jar
> ./specialpurpose/solr/lib/runtime/lucene-spatial-5.3.1.jar
> ./specialpurpose/solr/webapp/solr/WEB-INF/lib/lucene-spatial-5.3.1.jar
> ./specialpurpose/solr/lib/runtime/lucene-suggest-5.3.1.jar
> ./specialpurpose/solr/webapp/solr/WEB-INF/lib/lucene-suggest-5.3.1.jar
> Christian found the following jars duplicated:
> ./framework/base/lib/clhm-release-1.0-lru.jar
> ./specialpurpose/solr/webapp/solr/WEB-INF/lib/concurrentlinkedhashmap-lru-1.2.jar
> Other jars duplicated:
> ./framework/base/lib/jackson-core-2.4.2.jar
> ./specialpurpose/solr/webapp/solr/WEB-INF/lib/jackson-core-2.5.4.jar



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)