Any plans to patch Lucene 8.11.x for CVE-2024-45772 ?

Renaud SAINT-GRATIEN <[email protected]> Mon, 28 Oct 2024 08:24:46 +0000

Newsgroups	gmane.comp.jakarta.lucene.user
Message-ID	<AS4PR10MB5895ED85467C1D02443F472FFB4A2@AS4PR10MB5895.EURPRD10.PROD.OUTLOOK.COM>

CONFIDENTIAL

Hello,

Is there any plan to patch Lucene 8.11 for CVE-2024-45772 ?
I need to stay on 8.11 branch because my application still runs on Java 8. We plan to migrate to Java 17 but this cannot be done sooner than mid 2025... (this is a huge application).
Thank you for this amazing piece of software and thanks for your help!

Best regards,

Renaud Saint-Gratien
Software engineer - Rail
TRU-TRD-ENG-RAI-NCE-SRD