www-announce mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Ishan Chattopadhyaya <is...@apache.org>
Subject [ANNOUNCE] Apache Solr 6.6.2 released
Date Wed, 18 Oct 2017 08:33:11 GMT
18 October 2017, Apache Solr™ 6.6.2 available

The Lucene PMC is pleased to announce the release of Apache Solr 6.6.2

Solr is the popular, blazing fast, open source NoSQL search platform from
Apache Lucene project. Its major features include powerful full-text
hit highlighting, faceted search and analytics, rich document parsing,
geospatial search, extensive REST APIs as well as parallel SQL. Solr is
enterprise grade, secure and highly scalable, providing fault tolerant
distributed search and indexing, and powers the search and navigation
of many of the world's largest internet sites.

This release includes a critical security fix and a bugfix. Details:

* Fix for a 0-day exploit (CVE-2017-12629), details:
  RunExecutableListener has been disabled by default (can be enabled by
  -Dsolr.enableRunExecutableListener=true) and resolving external entities
  the XML query parser (defType=xmlparser or {!xmlparser ... }) is disabled

* Fix a bug where Solr was attempting to load the same core twice (Error
  "Lock held by this virtual machine").

Furthermore, this release includes Apache Lucene 6.6.2 which includes one
fix since the 6.6.1 release.

The release is available for immediate download at:


Please read CHANGES.txt for a detailed list of changes:


Please report any feedback to the mailing lists

Note: The Apache Software Foundation uses an extensive mirroring
network for distributing releases. It is possible that the mirror you
are using may not have replicated the release yet. If that is the
case, please try another mirror. This also goes for Maven access.

View raw message