tocsin

Debian/lucene-solr: unknown

The (1) UpdateRequestHandler for XSLT or (2) XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration

Action: Upgrade lucene-solr to 3.6.2+dfsg-2 or later.

Affected

introducedfixedlast affected
03.6.2+dfsg-2-

Fixed versions

3.6.2+dfsg-2

Sources

published · modified · JSON