Skip to content
GitLab
Explore
Sign in
Register
Commits on Source (2)
CVE-2019-0193,lucene-solr: Fixed in unstable
· a0527f74
Markus Koschany
authored
Oct 10, 2019
a0527f74
Reserve DLA-1954-1 for lucene-solr
· 5133f840
Markus Koschany
authored
Oct 10, 2019
5133f840
Show whitespace changes
Inline
Side-by-side
data/CVE/list
View file @
5133f840
...
...
@@ -50019,7 +50019,7 @@ CVE-2019-0195 (Manipulating classpath asset file URLs, an attacker could guess t
CVE-2019-0194 (Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 ...)
NOT-FOR-US: Apache Camel
CVE-2019-0193 (In Apache Solr, the DataImportHandler, an optional but popular module ...)
- lucene-solr
<unfixed> (low)
- lucene-solr
3.6.2+dfsg-22
NOTE: https://issues.apache.org/jira/browse/SOLR-13669
NOTE: upstream recommends everybody upgrade or rework their configuration
NOTE: consider backporting enable.dih.dataConfigParam instead:
data/DLA/list
View file @
5133f840
[10 Oct 2019] DLA-1954-1 lucene-solr - security update
{CVE-2019-0193}
[jessie] - lucene-solr 3.6.2+dfsg-5+deb8u3
[10 Oct 2019] DLA-1953-1 clamav - security update
{CVE-2019-12625 CVE-2019-12900}
[jessie] - clamav 0.101.4+dfsg-0+deb8u1
...
...
data/dla-needed.txt
View file @
5133f840
...
...
@@ -89,8 +89,6 @@ linux (Ben Hutchings)
--
linux-4.9 (Ben Hutchings)
--
lucene-solr (Markus Koschany)
--
milkytracker (Utkarsh Gupta)
NOTE: 20190830: Several <no-dsa> issues open for jessie.
NOTE: 20191008: Testing the package.
...
...