You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@lucene.apache.org by Apache Wiki <wi...@apache.org> on 2017/10/18 16:54:51 UTC

[Solr Wiki] Update of "SolrSecurity" by ShalinMangar

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Solr Wiki" for change notification.

The "SolrSecurity" page has been changed by ShalinMangar:
https://wiki.apache.org/solr/SolrSecurity?action=diff&rev1=45&rev2=46

Comment:
Added CVE-2017-12629

  
  == Security announcements ==
  
+  * 2017-10-18: CVE-2017-12629: Several critical vulnerabilities discovered in Apache Solr (XXE & RCE)
   * [[http://mail-archives.us.apache.org/mod_mbox/www-announce/201709.mbox/%3CCAOOKt53AOScg04zUh0%2BR_fcXD0C9s5mQ-OzdgYdnHz49u1KmXw@mail.gmail.com%3E|2017-09-18: CVE-2017-9803: Security vulnerability in kerberos delegation token functionality]]
   * [[http://mail-archives.us.apache.org/mod_mbox/www-announce/201707.mbox/%3CCAOOKt53EgrybaD%2BiSn-nBbvFdse-szhg%3DhMoDZuvUvyMme-Z%3Dg%40mail.gmail.com%3E|2017-07-07: CVE-2017-7660: Security Vulnerability in secure inter-node communication in Apache Solr]]
   * [[http://lucene.apache.org/solr/news.html|2017-02-15: CVE-2017-3163: Apache Solr ReplicationHandler path traversal attack]]