--------------------------------------------------------------------------------Fedora Update Notification
FEDORA-2017-005f8f7f7d
2017-11-01 15:19:51.800319
--------------------------------------------------------------------------------Name        : lucene
Product     : Fedora 25
Version     : 5.5.0
Release     : 5.fc25
URL         : https://lucene.apache.org/
Summary     : High-performance, full-featured text search engine
Description :
Apache Lucene is a high-performance, full-featured text search
engine library written entirely in Java. It is a technology suitable
for nearly any application that requires full-text search, especially
cross-platform.

--------------------------------------------------------------------------------Update Information:

Security fix for CVE-2017-12629
--------------------------------------------------------------------------------References:

  [ 1 ] Bug #1501529 - CVE-2017-12629 Solr: Code execution via entity expansion
        https://bugzilla.redhat.com/show_bug.cgi?id=1501529
--------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade lucene' at the command line.
For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora 25: lucene Security Update

November 1, 2017
Security fix for CVE-2017-12629

Summary

Apache Lucene is a high-performance, full-featured text search

engine library written entirely in Java. It is a technology suitable

for nearly any application that requires full-text search, especially

cross-platform.

Security fix for CVE-2017-12629

[ 1 ] Bug #1501529 - CVE-2017-12629 Solr: Code execution via entity expansion

https://bugzilla.redhat.com/show_bug.cgi?id=1501529

su -c 'dnf upgrade lucene' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

FEDORA-2017-005f8f7f7d 2017-11-01 15:19:51.800319 Product : Fedora 25 Version : 5.5.0 Release : 5.fc25 URL : https://lucene.apache.org/ Summary : High-performance, full-featured text search engine Description : Apache Lucene is a high-performance, full-featured text search engine library written entirely in Java. It is a technology suitable for nearly any application that requires full-text search, especially cross-platform. Security fix for CVE-2017-12629 [ 1 ] Bug #1501529 - CVE-2017-12629 Solr: Code execution via entity expansion https://bugzilla.redhat.com/show_bug.cgi?id=1501529 su -c 'dnf upgrade lucene' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Change Log

References

Update Instructions

Severity
Product : Fedora 25
Version : 5.5.0
Release : 5.fc25
URL : https://lucene.apache.org/
Summary : High-performance, full-featured text search engine

Related News

24.Key Code Esm H320
2 - 3 min read
The Akira ransomware group has extorted approximately $42 million from over 250 victims since January 1, 2024. The group initially focused on
5.ShakingHands Esm H320
2 - 3 min read
At The Linux Foundation's Open Source Summit North America , Linus Torvalds, the creator of Linux, discussed various topics related to Linux
30.Lock Globe Motherboard Esm H320
1 - 2 min read
The SPDX 3.0 release marks a significant milestone in software management, particularly for Linux admins, infosec professionals, internet security
11.Locks IsometricPattern Esm H320
2 - 3 min read
Open Source maintainers and developers have been warned about the continued wave of attacks aimed at project maintainers similar to those recently
28.Lock Globe Esm H320
1 - 2 min read
A resurgence of cyberattacks targeting Linux systems in Asian campaigns through the utilization of the Pupy Remote Access Trojan (RAT) has been
27.Tablet Connections Blocks Lock Esm H320
2 - 4 min read
Canonical has recently announced the Beta release of Ubuntu Linux 24.04 LTS , codenamed "Noble Numbat." This release aims to continue Ubuntu's
21.Globe RadiatingCode Esm H320
2 - 3 min read
The open-source movement has come a long way, from its origins in the 1960s and 1970s to becoming an integral part of organizations worldwide.
13.Lock StylizedMotherboard Esm H320
2 - 3 min read
The Rust-based Edera project demonstrates a unique approach to container security that addresses cloud-native computing challenges. Let's examine
Sign Up

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved