You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@lucene.apache.org by bu...@apache.org on 2017/10/09 22:46:44 UTC
svn commit: r1019308 - in /websites/staging/lucene/trunk/content: ./
solr/news.html
Author: buildbot
Date: Mon Oct 9 22:46:44 2017
New Revision: 1019308
Log:
Staging update by buildbot for lucene
Modified:
websites/staging/lucene/trunk/content/ (props changed)
websites/staging/lucene/trunk/content/solr/news.html
Propchange: websites/staging/lucene/trunk/content/
------------------------------------------------------------------------------
--- cms:source-revision (original)
+++ cms:source-revision Mon Oct 9 22:46:44 2017
@@ -1 +1 @@
-1811367
+1811622
Modified: websites/staging/lucene/trunk/content/solr/news.html
==============================================================================
--- websites/staging/lucene/trunk/content/solr/news.html (original)
+++ websites/staging/lucene/trunk/content/solr/news.html Mon Oct 9 22:46:44 2017
@@ -371,10 +371,12 @@ does not implement either "HttpClientInt
"HttpClientBuilderPlugin", his/her servers are vulnerable to this
attack. Users who only use SSL without basic authentication or those
who use Kerberos are not affected.</p>
-<p><strong>Mitigation</strong>:
-6.x users should upgrade to 6.6
-5.x users should obtain the latest source from git and apply this patch:
-http://git-wip-us.apache.org/repos/asf/lucene-solr/commit/2f5ecbcf</p>
+<p><strong>Mitigation</strong>:</p>
+<ul>
+<li>6.x users should upgrade to 6.6.0 or higher</li>
+<li>5.x users should obtain the latest source from git and apply this patch:
+<a href="http://git-wip-us.apache.org/repos/asf/lucene-solr/commit/2f5ecbcf">http://git-wip-us.apache.org/repos/asf/lucene-solr/commit/2f5ecbcf</a></li>
+</ul>
<p><strong>Credit</strong>:
This issue was discovered by Noble Paul of Lucidworks Inc.</p>
<p><strong>References</strong>:</p>