Apache Solr 7 end of life
Apache Solr 7 reached end of life on 11 May 2022 and has received no security fixes since. It is two major versions behind the maintained line, and it predates several of the hardening changes Solr made in response to its remote code execution advisories.
- End of life
- 11 May 2022
- Released
- Sept 2017
- Final release
- 7.7.3
- Successor
- Solr 9
Date published by Apache Solr release history, cross-checked against endoflife.date. We do not publish a lifecycle date we cannot source.
What actually stops on 11 May 2022
- Security fixes for the 7.x line and its bundled dependencies
- Any further 7.x releases — 7.7.3 was the last
What actually breaks in the upgrade
Two majors behind means two index format changes
Solr 7 to 9 crosses more than one Lucene format boundary. In practice this is a rebuild on a parallel cluster with a cutover, not an in-place upgrade, which is a larger project than the 8-to-9 path.
Your options, costed honestly
Including the ones that do not involve buying anything from us.
| Option | What it is | Effort | Cost | Our view |
|---|---|---|---|---|
| Rebuild on Solr 9 | Parallel cluster, reindex, cutover. | Substantial | Engineering time | The destination. Plan it as a project with a relevance sign-off. |
| OSSeva extended support | Patched 7.x builds. | Drop-in | Per cluster | Buys the time to do the rebuild properly. |
What OSSeva does for Apache Solr 7
OSSeva patches this line
OSSeva ships patched Solr 7.x builds including the bundled Lucene, Jetty and logging libraries.
Apache Solr extended supportWhat your auditor will say
Search clusters frequently index cardholder-adjacent data for internal tooling. An unpatched Solr node in that path is in scope, and Solr's advisory history is dominated by remote code execution reached through request handlers.
Solr is often deployed on an assumption of network isolation that no longer matches how the application reaches it. Both the access-control and the remediation criteria bite here.
Apache Solr 7: common questions
When did Apache Solr 7 reach end of life?
11 May 2022. The final release was 7.7.3.
Still running Apache Solr 7?
Tell us the versions and the estate size. We will tell you honestly whether to upgrade or to buy cover — and we say 'upgrade' more often than you would expect.