Stay Secure with the Latest Linux Advisories

security advisoryFedoracode execution

Fedora 25: 2017-005f8f7f7d Critical: Lucene Code Execution Risk

Security fix for CVE-2017-12629. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-005f8f7f7d 2017-11-01 15:19:51.800319 --------------------------------------------------------------------------------Name : lucene Product : Fedora 25 Version : 5.5.0 Release : 5.fc25 URL : https://lucene.apache.org/ Summary : High-performance, full-featured text search engine Description : Apache Lucene is a high-performance, full-featured text search engine library written entirely in Java. It is a technology suitable for nearly any application that requires full-text search, especially cross-platform. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2017-12629 --------------------------------------------------------------------------------References: [ 1 ] Bug #1501529 - CVE-2017-12629 Solr: Code execution via entity expansion https://bugzilla.redhat.com/show_bug.cgi?id=1501529 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade lucene' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Critical security patch for lucene in Fedora 25 tackles severe code execution vulnerabilities associated with CVE-2017-12629.. Lucene Security Fix, Fedora Update, Code Execution Risk. .Severity: Critical. LinuxSecurity.com Team

Nov 01, 2017 •Critical Fedora