UbuntuUpdates.org

Package "solr-tomcat"

Name: solr-tomcat

Description:

Enterprise search server based on Lucene3 - Tomcat integration
Latest version: 3.6.2+dfsg-8ubuntu0.1
Release: xenial (16.04)
Level: security
Repository: universe
Head package: lucene-solr
Homepage: http://lucene.apache.org

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "solr-tomcat"

All arch deb package
APT INSTALL

Other versions of "solr-tomcat" in Xenial

Repository Area Version
base universe 3.6.2+dfsg-8
updates universe 3.6.2+dfsg-8ubuntu0.1

Changelog

Version: 3.6.2+dfsg-8ubuntu0.1 2020-01-29 17:07:28 UTC

  lucene-solr (3.6.2+dfsg-8ubuntu0.1) xenial-security; urgency=medium

  * SECURITY UPDATE: Remote code execution via an XXE
    - debian/patches/CVE-2017-12629-1.patch: SOLR-11477: Disallow resolving of
      external entities in Lucene queryparser/xml/CoreParser
    - debian/patches/CVE-2017-12629-2.patch: RunExecutableListener was removed
      for security reasons
    - CVE-2017-12629

 -- Mike Salvatore <email address hidden> Tue, 28 Jan 2020 09:00:46 -0500
CVE-2017-12629 Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-li


About   -   Send Feedback to @ubuntu_updates