You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@lucene.apache.org by sa...@apache.org on 2017/10/24 15:46:48 UTC
[2/2] lucene-solr:branch_7x: Sync 5.5.5 CHANGES
Sync 5.5.5 CHANGES
Project: http://git-wip-us.apache.org/repos/asf/lucene-solr/repo
Commit: http://git-wip-us.apache.org/repos/asf/lucene-solr/commit/7e793d39
Tree: http://git-wip-us.apache.org/repos/asf/lucene-solr/tree/7e793d39
Diff: http://git-wip-us.apache.org/repos/asf/lucene-solr/diff/7e793d39
Branch: refs/heads/branch_7x
Commit: 7e793d391e2bc0fb6bf3b80970bcf994c787d41e
Parents: 10877a2
Author: Steve Rowe <sa...@apache.org>
Authored: Tue Oct 24 11:43:31 2017 -0400
Committer: Steve Rowe <sa...@apache.org>
Committed: Tue Oct 24 11:44:11 2017 -0400
----------------------------------------------------------------------
lucene/CHANGES.txt | 14 +++++++++++++-
solr/CHANGES.txt | 32 +++++++++++++++++++++++++++-----
2 files changed, 40 insertions(+), 6 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/lucene-solr/blob/7e793d39/lucene/CHANGES.txt
----------------------------------------------------------------------
diff --git a/lucene/CHANGES.txt b/lucene/CHANGES.txt
index 426efa3..07858d7 100644
--- a/lucene/CHANGES.txt
+++ b/lucene/CHANGES.txt
@@ -1680,7 +1680,19 @@ Other
(Martijn van Groningen, Mike McCandless)
======================= Lucene 5.5.5 =======================
-(No Changes)
+
+Changes in Runtime Behavior
+
+* Resolving of external entities in queryparser/xml/CoreParser is disallowed
+ by default. See SOLR-11477 for details.
+
+Bug Fixes
+
+* LUCENE-7419: Fix performance bug with TokenStream.end(), where it would lookup
+ PositionIncrementAttribute every time. (Mike McCandless, Robert Muir)
+
+* SOLR-11477: Disallow resolving of external entities in queryparser/xml/CoreParser
+ by default. (Michael Stepankin, Olga Barinova, Uwe Schindler, Christine Poerschke)
======================= Lucene 5.5.4 =======================
http://git-wip-us.apache.org/repos/asf/lucene-solr/blob/7e793d39/solr/CHANGES.txt
----------------------------------------------------------------------
diff --git a/solr/CHANGES.txt b/solr/CHANGES.txt
index 14dfda4..170f931 100644
--- a/solr/CHANGES.txt
+++ b/solr/CHANGES.txt
@@ -3600,16 +3600,38 @@ Consult the LUCENE_CHANGES.txt file for additional, low level, changes in this r
Versions of Major Components
---------------------
-Apache Tika 1.16
-Carrot2 3.15.0
+Apache Tika 1.7
+Carrot2 3.10.4
Velocity 1.7 and Velocity Tools 2.0
Apache UIMA 2.3.1
-Apache ZooKeeper 3.4.10
-Jetty 9.3.20.v20170531
+Apache ZooKeeper 3.4.6
+Jetty 9.2.13.v20150730
+Upgrade Notes
+----------------------
-(No Changes)
+* SOLR-11477: in the XML query parser (defType=xmlparser or {!xmlparser ... })
+ the resolving of external entities is now disallowed by default.
+
+* SOLR-11482: RunExecutableListener was deprecated and is disabled by default for
+ security reasons. Legacy applications still using it must explicitely pass
+ '-Dsolr.enableRunExecutableListener=true' to the Solr command line.
+ Be aware that you should really disable API-based config editing at the same
+ time, using '-Ddisable.configEdit=true'! (Uwe Schindler)
+
+Bug Fixes
+----------------------
+
+* SOLR-10420: Leaking one SolrZkClient instance per second (Scott Blum, Cao Manh Dat, Markus Jelsma, Steve Rowe)
+* SOLR-11477: Disallow resolving of external entities in the XML query parser (defType=xmlparser).
+ (Michael Stepankin, Olga Barinova, Uwe Schindler, Christine Poerschke)
+
+Other
+----------------------
+
+* SOLR-11486: Update jmatio to 1.2 and prevent deserialization inside Matlab files.
+ (Uwe Schindler, Steve Rowe)
======================= 5.5.4 =======================