svn commit: r1832533 - in /ofbiz/ofbiz-plugins/trunk: lucene/build.gradle solr/build.gradle

Author: jleroux
Date: Wed May 30 11:04:35 2018
New Revision: 1832533

URL: http://svn.apache.org/viewvc?rev=1832533&view=rev
Log:
Improved: Update Solr and Lucene from 7.2.1 to Solr 7.3.1 for security reason
(CVE-2018-8010)
(OFBIZ-10415)

I'm not sure we are affected but better be safe than sorry
see
SOLR-12316
https://wiki.apache.org/solr/SolrSecurity
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8010

The Lucene and Solr tests pass

Modified:
    ofbiz/ofbiz-plugins/trunk/lucene/build.gradle
    ofbiz/ofbiz-plugins/trunk/solr/build.gradle

Modified: ofbiz/ofbiz-plugins/trunk/lucene/build.gradle
URL: http://svn.apache.org/viewvc/ofbiz/ofbiz-plugins/trunk/lucene/build.gradle?rev=1832533&r1=1832532&r2=1832533&view=diff
==============================================================================
--- ofbiz/ofbiz-plugins/trunk/lucene/build.gradle (original)
+++ ofbiz/ofbiz-plugins/trunk/lucene/build.gradle Wed May 30 11:04:35 2018
@@ -17,7 +17,7 @@
  * under the License.
  */
 dependencies {
-    pluginLibsCompile 'org.apache.lucene:lucene-core:7.2.1' // Remember to change the version number in SearchWorker class when upgrading. Also Solr et Lucene should use the same version
-    pluginLibsCompile 'org.apache.lucene:lucene-queryparser:7.2.1'
-    pluginLibsCompile 'org.apache.lucene:lucene-analyzers-common:7.2.1'
+    pluginLibsCompile 'org.apache.lucene:lucene-core:7.3.1' // Remember to change the version number in SearchWorker class when upgrading. Also Solr et Lucene should use the same version
+    pluginLibsCompile 'org.apache.lucene:lucene-queryparser:7.3.1'
+    pluginLibsCompile 'org.apache.lucene:lucene-analyzers-common:7.3.1'
 }
\ No newline at end of file

Modified: ofbiz/ofbiz-plugins/trunk/solr/build.gradle
URL: http://svn.apache.org/viewvc/ofbiz/ofbiz-plugins/trunk/solr/build.gradle?rev=1832533&r1=1832532&r2=1832533&view=diff
==============================================================================
--- ofbiz/ofbiz-plugins/trunk/solr/build.gradle (original)
+++ ofbiz/ofbiz-plugins/trunk/solr/build.gradle Wed May 30 11:04:35 2018
@@ -17,7 +17,7 @@
  * under the License.
  */
 dependencies {
-    pluginLibsCompile 'org.apache.solr:solr-core:7.2.1' // Remember to change the version number in SearchWorker class when upgrading. Also Solr et Lucene should use the same version
+    pluginLibsCompile 'org.apache.solr:solr-core:7.3.1' // Remember to change the version number in SearchWorker class when upgrading. Also Solr et Lucene should use the same version
     pluginLibsCompile 'com.google.guava:guava:20.0'
 }