• [SECURITY] [DSA 4124-1] lucene-solr security update

    From Moritz Muehlenhoff@1:229/2 to All on Tue Feb 27 20:50:02 2018
    From: [email protected]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-4124-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 27, 2018 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : lucene-solr
    CVE ID : CVE-2017-3163 CVE-2017-12629

    Two vulnerabilities have been found in Solr, a search server based on
    Lucene, which could result in the execution of arbitrary code or
    path traversal.

    For the oldstable distribution (jessie), these problems have been fixed
    in version 3.6.2+dfsg-5+deb8u1.

    For the stable distribution (stretch), these problems have been fixed in version 3.6.2+dfsg-10+deb9u1.

    We recommend that you upgrade your lucene-solr packages.

    For the detailed security status of lucene-solr please refer to
    its security tracker page at: https://security-tracker.debian.org/tracker/lucene-solr

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: [email protected]
    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAlqVszcACgkQEMKTtsN8 TjYP2w/+N3V40DKsIPZu3nZKWfPzbadW/uruExa/lFrksxG9fcEkCmhcC3CjO3ns 4cDKZb8UMRzzsL0ZIUUfzodSBCDOry1x9rfi9PzfCUdp7kYwC64/iEc2mO9OuSdt mJnvD+OEcvw5+Zwva6Lo5IQL2bDpa2B8CfAioOhXeLAUCpiW9u4hW+nqxVT9vd7k fyvbw9gudJEHsS32wC0pXgx3J7l8ChHPhbbdk2grcefv+eHMofmmJDaJxOjQxs2Q 3FnRan9blVoJe0VgmHd6rGAipTEx/ycBvU+TdUhoD7MxLwFW5gvEw55D+zcuUlYU 85xWbKKjK3+L8pfJ7HlGeOpoDWt8sq7z3GyydxclPn1DIjICU8oxG0SHmc3EHwdc 0Q/u7h1V0ga9EBBIUtNw4jnFo6pgY6CDMqaGDYJ4t59WdaZNUiUWizKJGrOlUgMr 9trfg8/AgIujAgmwC980Z2n54kLldlTP8WrexFqRTHRo6psoT4fU/yXPIMrtXslZ 8Q5RSKyJgdCua6tgSSzGBqTgxwJs02PLVZkh41XeQuQ6BpxURa0yy4FeRK1pJJSC dTiG+MVAASLvCQwgGX7ZWVAseyMJFGZ9xO5kGNUsLTOdUCBZrZDdpfwYnb242F9j NCX2xiTZNKszbc2s5mlc8WFg2NB+Yqzf8NE3bO7HFjm+NVH0fwY=
    =yr9U
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)