Debian Package Tracker

general

source: lucene-solr (main)
version: 3.6.2+dfsg-22
maintainer: Debian Java Maintainers (archive) (DMD)
uploaders: Markus Koschany [DMD]
arch: all
std-ver: 4.4.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 3.6.2+dfsg-5+deb8u2
o-o-sec: 3.6.2+dfsg-5+deb8u3
oldstable: 3.6.2+dfsg-10+deb9u2
old-sec: 3.6.2+dfsg-10+deb9u3
stable: 3.6.2+dfsg-20+deb10u2
unstable: 3.6.2+dfsg-22

versioned links

3.6.2+dfsg-5+deb8u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.6.2+dfsg-5+deb8u3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.6.2+dfsg-10+deb9u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.6.2+dfsg-10+deb9u3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.6.2+dfsg-20+deb10u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.6.2+dfsg-22: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

liblucene3-contrib-java (1 bugs: 0, 1, 0, 0)
liblucene3-java
libsolr-java
solr-common
solr-jetty (2 bugs: 0, 2, 0, 0)
solr-tomcat (3 bugs: 0, 3, 0, 0)

action needed

A new upstream version is available: 8.6.3 high

A new upstream version 8.6.3 is available, you should consider packaging it.

Created: 2020-06-29 Last update: 2020-10-30 01:06

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2020-13941: Reported in SOLR-14515 (private) and fixed in SOLR-14561 (public), released in Solr version 8.6.0. The Replication handler (https://lucene.apache.org/solr/guide/8_6/index-replication.html#http-api-commands-for-the-replicationhandler) allows commands backup, restore and deleteBackup. Each of these take a location parameter, which was not validated, i.e you could read/write to any location the solr user can access.

Please fix it.

Created: 2020-08-24 Last update: 2020-10-15 05:23

The package has not entered testing even though the delay is over normal

The package has not entered testing even though the 5-day delay is over. Check why.

Created: 2020-08-23 Last update: 2020-10-30 05:34

Multiarch hinter reports 1 issue(s) normal

There are issues with the multiarch metadata for this package.

liblucene3-java could be marked Multi-Arch: foreign

Created: 2016-09-14 Last update: 2020-10-30 03:33

lintian reports 4 warnings normal

Lintian reports 4 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2020-07-29 Last update: 2020-07-29 12:32

1 ignored security issue in stretch low

There is 1 open security issue in stretch.

1 issue skipped by the security teams:

CVE-2020-13941: Reported in SOLR-14515 (private) and fixed in SOLR-14561 (public), released in Solr version 8.6.0. The Replication handler (https://lucene.apache.org/solr/guide/8_6/index-replication.html#http-api-commands-for-the-replicationhandler) allows commands backup, restore and deleteBackup. Each of these take a location parameter, which was not validated, i.e you could read/write to any location the solr user can access.

Please fix it.

Created: 2020-08-24 Last update: 2020-10-15 05:23

1 ignored security issue in buster low

There is 1 open security issue in buster.

1 issue skipped by the security teams:

CVE-2020-13941: Reported in SOLR-14515 (private) and fixed in SOLR-14561 (public), released in Solr version 8.6.0. The Replication handler (https://lucene.apache.org/solr/guide/8_6/index-replication.html#http-api-commands-for-the-replicationhandler) allows commands backup, restore and deleteBackup. Each of these take a location parameter, which was not validated, i.e you could read/write to any location the solr user can access.

Please fix it.

Created: 2019-08-05 Last update: 2020-10-15 05:23

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.5.0 instead of 4.4.1).

Created: 2020-01-21 Last update: 2020-01-21 05:06

testing migrations

excuses:
- Migration status for lucene-solr (- to 3.6.2+dfsg-22): BLOCKED: Rejected/violates migration policy/introduces a regression
- Issues preventing migration:
- Updating lucene-solr introduces new bugs: #964711
- Additional info:
- Piuparts tested OK - https://piuparts.debian.org/sid/source/l/lucene-solr.html
- 385 days old (needed 5 days)
- Not considered

news

[rss feed]

[2020-08-24] Accepted lucene-solr 3.6.2+dfsg-20+deb10u2 (source) into proposed-updates->stable-new, proposed-updates (Debian FTP Masters) (signed by: Markus Koschany)
[2020-08-24] lucene-solr REMOVED from testing (Debian testing watch)
[2020-08-15] Accepted lucene-solr 3.6.2+dfsg-10+deb9u3 (source all) into oldstable (Markus Koschany)
[2019-10-16] lucene-solr 3.6.2+dfsg-22 MIGRATED to testing (Debian testing watch)
[2019-10-10] Accepted lucene-solr 3.6.2+dfsg-5+deb8u3 (source all) into oldoldstable (Markus Koschany)
[2019-10-10] Accepted lucene-solr 3.6.2+dfsg-22 (source) into unstable (Markus Koschany)
[2019-09-17] Accepted lucene-solr 3.6.2+dfsg-20+deb10u1 (source) into proposed-updates->stable-new, proposed-updates (Markus Koschany)
[2019-09-04] lucene-solr 3.6.2+dfsg-21 MIGRATED to testing (Debian testing watch)
[2019-09-02] Accepted lucene-solr 3.6.2+dfsg-21 (source) into unstable (Markus Koschany)
[2019-05-01] lucene-solr 3.6.2+dfsg-20 MIGRATED to testing (Debian testing watch)
[2019-04-25] Accepted lucene-solr 3.6.2+dfsg-20 (source) into unstable (Markus Koschany)
[2019-04-18] Accepted lucene-solr 3.6.2+dfsg-19 (source) into unstable (Markus Koschany)
[2019-03-14] lucene-solr 3.6.2+dfsg-18 MIGRATED to testing (Debian testing watch)
[2019-03-03] Accepted lucene-solr 3.6.2+dfsg-18 (source) into unstable (Markus Koschany)
[2019-02-25] lucene-solr 3.6.2+dfsg-17 MIGRATED to testing (Debian testing watch)
[2019-02-15] Accepted lucene-solr 3.6.2+dfsg-17 (source) into unstable (Markus Koschany)
[2018-12-16] lucene-solr 3.6.2+dfsg-16 MIGRATED to testing (Debian testing watch)
[2018-12-10] Accepted lucene-solr 3.6.2+dfsg-16 (source) into unstable (Emmanuel Bourg)
[2018-11-15] lucene-solr 3.6.2+dfsg-15 MIGRATED to testing (Debian testing watch)
[2018-11-09] Accepted lucene-solr 3.6.2+dfsg-15 (source) into unstable (Markus Koschany)
[2018-08-31] lucene-solr 3.6.2+dfsg-14 MIGRATED to testing (Debian testing watch)
[2018-08-25] Accepted lucene-solr 3.6.2+dfsg-14 (source) into unstable (Markus Koschany)
[2018-05-12] lucene-solr 3.6.2+dfsg-13 MIGRATED to testing (Debian testing watch)
[2018-05-07] Accepted lucene-solr 3.6.2+dfsg-5+deb8u2 (source all) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Markus Koschany)
[2018-05-07] Accepted lucene-solr 3.6.2+dfsg-10+deb9u2 (source all) into proposed-updates->stable-new, proposed-updates (Markus Koschany)
[2018-05-06] Accepted lucene-solr 3.6.2+dfsg-13 (source) into unstable (Markus Koschany)
[2018-05-06] Accepted lucene-solr 3.6.2+dfsg-5+deb8u2 (source all) into oldstable->embargoed, oldstable (Markus Koschany)
[2018-05-06] Accepted lucene-solr 3.6.2+dfsg-10+deb9u2 (source all) into stable->embargoed, stable (Markus Koschany)
[2018-05-04] lucene-solr 3.6.2+dfsg-12 MIGRATED to testing (Debian testing watch)
[2018-05-01] Accepted lucene-solr 3.6.2+dfsg-12 (source) into unstable (Markus Koschany)

bugs [bug history graph]

all: 9
RC: 1
I&N: 8
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian (0, 4)
buildd: logs, clang
popcon
browse source code
edit tags
other distros
security tracker
l10n (100, -)

ubuntu

[Information about Ubuntu for Debian Developers]

version: 3.6.2+dfsg-22
7 bugs (1 patch)