Log4j logging files in Solr are too old. Replacing with latest to avoid security concerns

Islandora-Devops / isle-buildkit

Provides a number of Docker images which can be used to build an Islandora site. See also https://github.com/Islandora-Devops/isle-dc

https://www.islandora.ca/

MIT License

13 stars 23 forks source link

Log4j logging files in Solr are too old. Replacing with latest to avoid security concerns #313

Closed g7morris closed 11 months ago

g7morris commented 11 months ago

WIP for upgrading LOG4J logging files that are 2.17.x vs latest 2.22.0. This is a concern for security and CVEs. Will test shortly.

g7morris commented 11 months ago

I will resume work on Monday and am not expecting this to work yet as I haven't attempted make bake solr to work out kinks, syntax errors etc.

nigelgbanks commented 11 months ago

@joecorall raised a point that we could upgrade to Solr 9.x, maybe that's the route forward? https://islandora.slack.com/archives/C03472QEUM8/p1701358102239509

g7morris commented 11 months ago

Okay I'll close this PR then as upgrading to Solr 9.x sounds like the community solution. @nigelgbanks or @joecorall Are either of you opening up a new issue to this effect and won't the current Drupal schema be impacted by this?