Accepted lucene-solr 3.6.2+dfsg-10+deb9u3 (source all) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 15 Aug 2020 22:52:11 +0200
Source: lucene-solr
Binary: liblucene3-java liblucene3-contrib-java liblucene3-java-doc libsolr-java solr-common solr-tomcat solr-jetty
Architecture: source all
Version: 3.6.2+dfsg-10+deb9u3
Distribution: stretch-security
Urgency: high
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
liblucene3-contrib-java - Full-text search engine library for Java - additional libraries
liblucene3-java - Full-text search engine library for Java - core library
liblucene3-java-doc - Documentation for Lucene
libsolr-java - Enterprise search server based on Lucene - Java libraries
solr-common - Enterprise search server based on Lucene3 - common files
solr-jetty - Enterprise search server based on Lucene3 - Jetty integration
solr-tomcat - Enterprise search server based on Lucene3 - Tomcat integration
Changes:
lucene-solr (3.6.2+dfsg-10+deb9u3) stretch-security; urgency=high
.
* Team upload.
* Fix CVE-2019-0193:
The DataImportHandler, an optional but popular module to pull in data from
databases and other sources, has a feature in which the whole DIH
configuration can come from a request's "dataConfig" parameter. The debug
mode of the DIH admin screen uses this to allow convenient debugging /
development of a DIH config. Since a DIH config can contain scripts, this
parameter is a security risk. Starting from now on, use of this parameter
requires setting the Java System property "enable.dih.dataConfigParam" to
true. For example this can be achieved with solr-tomcat by adding
-Denable.dih.dataConfigParam=true to JAVA_OPTS in /etc/default/tomcat7.
* Disable the tests because they fail because of network errors.
Checksums-Sha1:
4d86f300fbe25c3824a06be8c98ef252526604dd 3406 lucene-solr_3.6.2+dfsg-10+deb9u3.dsc
4551e57f6aad6cd1220954f609b922643b741a09 53468 lucene-solr_3.6.2+dfsg-10+deb9u3.debian.tar.xz
5d39cd05a8aafa641a8b70c5103021141061c636 10974202 liblucene3-contrib-java_3.6.2+dfsg-10+deb9u3_all.deb
37e6b785ec75d370f317449e2864769dcf408e4b 4825626 liblucene3-java-doc_3.6.2+dfsg-10+deb9u3_all.deb
3672549a3458714f38206f40227101196f7dd504 1563914 liblucene3-java_3.6.2+dfsg-10+deb9u3_all.deb
8342ffa1a5e7be87ed392e91d29be53367921ed8 2040118 libsolr-java_3.6.2+dfsg-10+deb9u3_all.deb
74e12cb066bd445674cd7bb9326c96003a14c656 14940 lucene-solr_3.6.2+dfsg-10+deb9u3_amd64.buildinfo
1b2c7160a521785b7acd9c5b9ab067e5c6f19bde 144930 solr-common_3.6.2+dfsg-10+deb9u3_all.deb
4d1a31032550516cf867022db8c917994515d4ab 9596 solr-jetty_3.6.2+dfsg-10+deb9u3_all.deb
418f6b26e061c2d716d8f0e035e6d20c1e357460 9866 solr-tomcat_3.6.2+dfsg-10+deb9u3_all.deb
Checksums-Sha256:
aa5c6c6107b526d597861885c4bdf529bfaffe1b41ea619153930eb149260213 3406 lucene-solr_3.6.2+dfsg-10+deb9u3.dsc
17281f72d9c8e0baf6de7140a46f24e56dc195f462d00ed1b3c12f8eb982d740 53468 lucene-solr_3.6.2+dfsg-10+deb9u3.debian.tar.xz
19f90fccbe3d2187a6b2d31b86123308a91609447a24a0f64ea50b985863e2d0 10974202 liblucene3-contrib-java_3.6.2+dfsg-10+deb9u3_all.deb
e40632541154b4060fb3c8529e744944853885722e5155667eea66257b7b6483 4825626 liblucene3-java-doc_3.6.2+dfsg-10+deb9u3_all.deb
732a94892bb733537407af771d41c787b61ef459b5d66affd2e471fbc747bb9e 1563914 liblucene3-java_3.6.2+dfsg-10+deb9u3_all.deb
919145224609d820a7bca83b9536a197255f6db4520684c0987bdf878ba4ebd5 2040118 libsolr-java_3.6.2+dfsg-10+deb9u3_all.deb
ac1171c38f7e08d2f1a5371d1a4bc98d7b415e23476e6fe1c559107229389d5f 14940 lucene-solr_3.6.2+dfsg-10+deb9u3_amd64.buildinfo
c469617064f47c2ffc8a90d7f60a7814017b5536c7495b1cbfbf42f2c76050e5 144930 solr-common_3.6.2+dfsg-10+deb9u3_all.deb
3db809ce9b14cfde9f1a86de0770063c25876a957b8eb63ebb99d5023f58f58a 9596 solr-jetty_3.6.2+dfsg-10+deb9u3_all.deb
4cc82c406e727dc9fe7dde59e56ac8364301fb5057a14a403a8cf55ffcdf44dd 9866 solr-tomcat_3.6.2+dfsg-10+deb9u3_all.deb
Files:
11319a91be39025cae5555807d5f2eae 3406 java optional lucene-solr_3.6.2+dfsg-10+deb9u3.dsc
715677a02cd0144195ef0dafee56f07f 53468 java optional lucene-solr_3.6.2+dfsg-10+deb9u3.debian.tar.xz
454752770ccf1c9f14575bd841a54bcc 10974202 java optional liblucene3-contrib-java_3.6.2+dfsg-10+deb9u3_all.deb
3f786d9851bf614d467d41f83cff537f 4825626 doc optional liblucene3-java-doc_3.6.2+dfsg-10+deb9u3_all.deb
9f74084314766d3047e6b1989ec0add1 1563914 java optional liblucene3-java_3.6.2+dfsg-10+deb9u3_all.deb
9ccbff77bd1607697a61a6712fd54721 2040118 java optional libsolr-java_3.6.2+dfsg-10+deb9u3_all.deb
5b27b3bf2cb6bc190c705ec0badc0416 14940 java optional lucene-solr_3.6.2+dfsg-10+deb9u3_amd64.buildinfo
4a5b2f6fee46daf5b3d23755c4e2fdc9 144930 java optional solr-common_3.6.2+dfsg-10+deb9u3_all.deb
2f8cf8c3117e1fc0eec0d1c5f996390a 9596 java optional solr-jetty_3.6.2+dfsg-10+deb9u3_all.deb
70445a147a38d907253cb8734a0595d3 9866 java optional solr-tomcat_3.6.2+dfsg-10+deb9u3_all.deb
-----BEGIN PGP SIGNATURE-----
iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAl84b2JfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD
RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp
YW4ub3JnAAoJENmtFLlRO1HkweEP/iU6Y+KKSlfsNySohcNterUKDJ6vA1RUogJE
3rgCpJKpz+sny5e0mo4+Oz0b7CDBcnjH9SePGgRkR57gwe2cY45RlBFKJiyjYVqz
XcFh2iBofkGkMmMVBfjvITT5WaLv1+ky0LrNIEmxPb9qusT79vUorMpTEVqs3J4B
OGwL/i8RIfFaZooJQMIjtFiabOJOxOx5BqwCD/ohoDxNwLK15SJ8ocM5UJmTotfp
DkUCNjDLVpaKef2n/fYRH37YRmdWO9OuGnUUwShLtp8dVRGpn/0DTEFGdLMpJUOH
oqaEjDRpFFvJ26KK6oWYyrWnj7MslL044YE7G0eChrwW+w/F2A1tRu4vyO+tlBvg
fThAr74MO/EtILNi4aFrsNGS+HAazIvErYLDqy0qDl6LgqkvQdUe+7ohRjVuIc91
sN4VQi+eTKqOxhuBpdXxd94+kM9kgsfhsP8cdrX+otewcqBYT1EiLyh2VkDtvb6n
byEnPvD/2/EPj6O8LUjAXVXn7MBt3aQGe6eXx9omWk91B+bQ7tTBBdWfeypjjFEw
fjOtHK5k7HjmCBYhsJzweqRIrMOSzs6sqQodQSUDMODLsnLMFGxsH6jGNBunj1P1
VPRxPtuXql7eKMjP4eQtausMsTtitzhekKDu4Qskl84lM/kUI48jmwajB92QLifN
U95JtEdv
=n1mF
-----END PGP SIGNATURE-----