Ausführen beliebiger Kommandos in Apache Lucene
ID: | FEDORA-2017-9b3e2904bf |
Distribution: | Fedora |
Plattformen: | Fedora 27 |
Datum: | Sa, 11. November 2017, 20:32 |
Referenzen: | http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12629 |
Applikationen: | Apache Lucene |
Originalnachricht |
|
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2017-9b3e2904bf 2017-11-11 13:29:22.444595 -------------------------------------------------------------------------------- Name : lucene Product : Fedora 27 Version : 6.1.0 Release : 6.fc27 URL : http://lucene.apache.org/ Summary : High-performance, full-featured text search engine Description : Apache Lucene is a high-performance, full-featured text search engine library written entirely in Java. It is a technology suitable for nearly any application that requires full-text search, especially cross-platform. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2017-12629 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1501529 - CVE-2017-12629 Solr: Code execution via entity expansion https://bugzilla.redhat.com/show_bug.cgi?id=1501529 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade lucene' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org |