You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ambari.apache.org by "Hudson (JIRA)" <ji...@apache.org> on 2019/02/27 12:23:00 UTC
[jira] [Commented] (AMBARI-25169) Upgrade Apache Solr version to
7.7.0 or later in Ambari
[ https://issues.apache.org/jira/browse/AMBARI-25169?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16779200#comment-16779200 ]
Hudson commented on AMBARI-25169:
---------------------------------
SUCCESS: Integrated in Jenkins build Ambari-branch-2.7 #434 (See [https://builds.apache.org/job/Ambari-branch-2.7/434/])
AMBARI-25169 - Upgrade Apache Solr version to 7.7.0 or later in Ambari (github: [https://gitbox.apache.org/repos/asf?p=ambari.git&a=commit&h=6eaf34b99e3c4e097e0cd237630066e273cf5499])
* (edit) ambari-infra/ambari-infra-solr-client/README.md
* (edit) ambari-infra/ambari-infra-solr-client/src/main/resources/solrIndexHelper.sh
* (edit) ambari-server/src/main/resources/common-services/AMBARI_INFRA_SOLR/0.1.0/package/scripts/command_commons.py
* (edit) ambari-logsearch/ambari-logsearch-server/src/main/configsets/history/conf/solrconfig.xml
* (edit) ambari-logsearch/docker/solr.yml
* (edit) ambari-infra/pom.xml
* (edit) ambari-logsearch/docker/Dockerfile
* (edit) ambari-logsearch/docker/docker-compose.yml
* (edit) ambari-infra/ambari-infra-solr-plugin/docker/infra-solr-docker-compose.sh
* (edit) ambari-server/src/main/resources/common-services/LOGSEARCH/0.5.0/properties/service_logs-solrconfig.xml.j2
* (edit) ambari-infra/ambari-infra-solr-client/src/main/python/migrationHelper.py
* (edit) ambari-logsearch/docker/logsearch-docker.sh
* (edit) ambari-logsearch/docker/sso.yml
* (edit) ambari-infra/ambari-infra-manager/docker/docker-compose.yml
* (edit) ambari-logsearch/ambari-logsearch-server/src/main/configsets/hadoop_logs/conf/solrconfig.xml
* (edit) ambari-logsearch/ambari-logsearch-server/src/main/configsets/audit_logs/conf/solrconfig.xml
* (edit) ambari-infra/ambari-infra-manager/docker/infra-manager-docker-compose.sh
* (edit) ambari-logsearch/pom.xml
> Upgrade Apache Solr version to 7.7.0 or later in Ambari
> -------------------------------------------------------
>
> Key: AMBARI-25169
> URL: https://issues.apache.org/jira/browse/AMBARI-25169
> Project: Ambari
> Issue Type: Task
> Components: ambari-infra
> Affects Versions: 2.7.3
> Reporter: Krisztian Kasa
> Assignee: Krisztian Kasa
> Priority: Major
> Labels: pull-request-available
> Fix For: 2.7.4
>
> Time Spent: 1h 50m
> Remaining Estimate: 0h
>
> CVE-2017-3164 SSRF issue in Apache Solr
> Severity: High
> Vendor: The Apache Software Foundation
> Versions Affected:
> Apache Solr versions from 1.3 to 7.6.0
> Description:
> The "shards" parameter does not have a corresponding whitelist mechanism,
> so it can request any URL.
> Mitigation:
> Upgrade to Apache Solr 7.7.0 or later.
> Ensure your network settings are configured so that only trusted traffic is
> allowed to ingress/egress your hosts running Solr.
> Credit:
> dk from Chaitin Tech
> References:
> https://issues.apache.org/jira/browse/SOLR-12770
> https://wiki.apache.org/solr/SolrSecurity
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)