Stay Secure with the Latest Linux Advisories

security advisoryupdateFedora

Fedora 32: FEDORA-2020-cf8ef2f333 Critical: Apache Lucene Security Fixes

Updates to the latest upstream release of Eclipse. See the upstream release notes for details: https://eclipseide.org/release/noteworthy/ Also contains security fixes for CVE-2019-17566 and CVE-2019-17638.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-cf8ef2f333 2020-08-31 15:48:37.485399 --------------------------------------------------------------------------------Name : lucene Product : Fedora 32 Version : 8.4.1 Release : 9.fc32 URL : https://lucene.apache.org/ Summary : High-performance, full-featured text search engine Description : Apache Lucene is a high-performance, full-featured text search engine library written entirely in Java. It is a technology suitable for nearly any application that requires full-text search, especially cross-platform. --------------------------------------------------------------------------------Update Information: Updates to the latest upstream release of Eclipse. See the upstream release notes for details: https://eclipseide.org/release/noteworthy/ Also contains security fixes for CVE-2019-17566 and CVE-2019-17638. --------------------------------------------------------------------------------ChangeLog: * Thu Aug 6 2020 Mat Booth - 0:8.4.1-9 - Add optional resolution on internal JDK APIs that might not be present on Java 11 * Thu Aug 6 2020 Mat Booth - 0:8.4.1-8 - Avoid requirement on com.sun.management package * Tue Jul 28 2020 Fedora Release Engineering - 0:8.4.1-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Tue Jul 21 2020 Mat Booth - 0:8.4.1-6 - Fix NIO linkage error when running on Java 8 due to incorrect cross-compilation * Sat Jul 11 2020 Jiri Vanek - 0:8.4.1-5 - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 * Wed May 6 2020 Mat Booth - 0:8.4.1-4 - Fix jp_minimal mode * Tue May 5 2020 Alexander Kurtakov - 0:8.4.1-3 - Disable test-framework as itsdependency (randomizedtesting) is removed. * Sat Mar 21 2020 Mat Booth - 0:8.4.1-2 - Fix deps for minimal mode * Sat Mar 21 2020 Mat Booth - 0:8.4.1-1 - Update to latest upstream release --------------------------------------------------------------------------------References: [ 1 ] Bug #1848617 - CVE-2019-17566 batik: SSRF via "xlink:href" https://bugzilla.redhat.com/show_bug.cgi?id=1848617 [ 2 ] Bug #1864680 - CVE-2019-17638 jetty: double release of resource can lead to information disclosure https://bugzilla.redhat.com/show_bug.cgi?id=1864680 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-cf8ef2f333' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Crucial Fedora update incorporating security enhancements for Lucene, tackling vulnerabilities recognized by CVE-2020-14746, CVE-2020-14818.. Fedora Update, Lucene Security, Apache Lucene Fixes, Fedora Security Advisory, System Updates. . Severity: Critical. LinuxSecurity.com Team

Aug 31, 2020 •Critical Fedora