lucene-solr: CVE-2018-1308 XXE in DataImportHandler

Debian Bug report logs - #896604
lucene-solr: CVE-2018-1308 XXE in DataImportHandler

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Markus Koschany <apo@debian.org>

To: submit@bugs.debian.org

Subject: lucene-solr: CVE-2018-1308 XXE in DataImportHandler

Date: Sun, 22 Apr 2018 21:15:31 +0200

[Message part 1 (text/plain, inline)]

Package: lucene-solr
X-Debbugs-CC: team@security.debian.org
Severity: grave
Tags: security

Hi,

The following vulnerability was published for lucene-solr.

CVE-2018-1308[0]:
| This vulnerability in Apache Solr 1.2 to 6.6.2 and 7.0.0 to 7.2.1
| relates to an XML external entity expansion (XXE) in the
| `&dataConfig=<inlinexml>` parameter of Solr's
DataImportHandler. It
| can be used as XXE using file/ftp/http protocols in order to read
| arbitrary local files from the Solr server or the internal network.

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2018-1308
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1308

Please adjust the affected versions in the BTS as needed.

Regards,

Markus

[signature.asc (application/pgp-signature, attachment)]

Message #16 received at 896604-close@bugs.debian.org (full text, mbox, reply):

From: Markus Koschany <apo@debian.org>

To: 896604-close@bugs.debian.org

Subject: Bug#896604: fixed in lucene-solr 3.6.2+dfsg-12

Date: Tue, 01 May 2018 22:35:37 +0000

Source: lucene-solr
Source-Version: 3.6.2+dfsg-12

We believe that the bug you reported is fixed in the latest version of
lucene-solr, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 896604@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Markus Koschany <apo@debian.org> (supplier of updated lucene-solr package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 01 May 2018 23:35:41 +0200
Source: lucene-solr
Binary: liblucene3-java liblucene3-contrib-java liblucene3-java-doc libsolr-java solr-common solr-tomcat solr-jetty
Architecture: source
Version: 3.6.2+dfsg-12
Distribution: unstable
Urgency: high
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
 liblucene3-contrib-java - Full-text search engine library for Java - additional libraries
 liblucene3-java - Full-text search engine library for Java - core library
 liblucene3-java-doc - Documentation for Lucene
 libsolr-java - Enterprise search server based on Lucene - Java libraries
 solr-common - Enterprise search server based on Lucene3 - common files
 solr-jetty - Enterprise search server based on Lucene3 - Jetty integration
 solr-tomcat - Enterprise search server based on Lucene3 - Tomcat integration
Closes: 895797 896604
Changes:
 lucene-solr (3.6.2+dfsg-12) unstable; urgency=high
 .
   * Team upload.
   * Fix FTBFS with Ant 1.10. (Closes: #895797)
   * Fix CVE-2018-1308. (Closes: #896604)
   * Declare compliance with Debian Policy 4.1.4.
Checksums-Sha1:
 9885b6a90d5c4d76edb228828b7303d876ee4f2c 3380 lucene-solr_3.6.2+dfsg-12.dsc
 a8b7a55eef6a421f6f97aaa9e8b2a4c56dad6039 52856 lucene-solr_3.6.2+dfsg-12.debian.tar.xz
 f860e49b5200a34beff94ea006b0fa2ce4fe3085 15122 lucene-solr_3.6.2+dfsg-12_amd64.buildinfo
Checksums-Sha256:
 f12df5419555270533f2937e3afddcbc39ce7d817f60ae0cbc894f1e362e951f 3380 lucene-solr_3.6.2+dfsg-12.dsc
 3495d2304d18007a4692c684574f3673c6c6c7bfb82a35b05a90136563a8d7c4 52856 lucene-solr_3.6.2+dfsg-12.debian.tar.xz
 6a0879395be64fda415226c28dd8ebad9364f14782dbb8c91f29a7bb2f715388 15122 lucene-solr_3.6.2+dfsg-12_amd64.buildinfo
Files:
 b0f4b76b0a7bac31e4b5eca232b6d635 3380 java optional lucene-solr_3.6.2+dfsg-12.dsc
 b70e3a20280809b245632864d23deea0 52856 java optional lucene-solr_3.6.2+dfsg-12.debian.tar.xz
 8a7b4c7cd0932054c957f28c2fda3ad3 15122 java optional lucene-solr_3.6.2+dfsg-12_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=Oqo5
-----END PGP SIGNATURE-----

Message #21 received at 896604-close@bugs.debian.org (full text, mbox, reply):

From: Markus Koschany <apo@debian.org>

To: 896604-close@bugs.debian.org

Subject: Bug#896604: fixed in lucene-solr 3.6.2+dfsg-10+deb9u2

Date: Mon, 07 May 2018 12:02:51 +0000

Source: lucene-solr
Source-Version: 3.6.2+dfsg-10+deb9u2

We believe that the bug you reported is fixed in the latest version of
lucene-solr, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 896604@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Markus Koschany <apo@debian.org> (supplier of updated lucene-solr package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 03 May 2018 00:38:56 +0200
Source: lucene-solr
Binary: liblucene3-java liblucene3-contrib-java liblucene3-java-doc libsolr-java solr-common solr-tomcat solr-jetty
Architecture: source all
Version: 3.6.2+dfsg-10+deb9u2
Distribution: stretch-security
Urgency: high
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
 liblucene3-contrib-java - Full-text search engine library for Java - additional libraries
 liblucene3-java - Full-text search engine library for Java - core library
 liblucene3-java-doc - Documentation for Lucene
 libsolr-java - Enterprise search server based on Lucene - Java libraries
 solr-common - Enterprise search server based on Lucene3 - common files
 solr-jetty - Enterprise search server based on Lucene3 - Jetty integration
 solr-tomcat - Enterprise search server based on Lucene3 - Tomcat integration
Closes: 886090 896604
Changes:
 lucene-solr (3.6.2+dfsg-10+deb9u2) stretch-security; urgency=high
 .
   * Team upload.
   * Fix CVE-2018-1308: XML external entity expansion in Solr's
     DataImportHandler. It can be used as XXE using file/ftp/http protocols in
     order to read arbitrary local files from the Solr server or the internal
     network. (Closes: #896604)
   * Symlink /etc/solr/solr-jetty.xml into /var/lib/jetty9/webapps/solr.xml
     to make solr-jetty work out-of-the-box. (Closes: #886090)
     Thanks to J.P. Larocque for the report.
Checksums-Sha1:
 0aed0bca1c56d8301f3da9b6a5db96c02db29015 3406 lucene-solr_3.6.2+dfsg-10+deb9u2.dsc
 567ba0e9a663c164037afd63f48d074e47475689 52596 lucene-solr_3.6.2+dfsg-10+deb9u2.debian.tar.xz
 06f80ebccc014e74fb9d290052cea7332604de12 10973528 liblucene3-contrib-java_3.6.2+dfsg-10+deb9u2_all.deb
 5affd0ab4c9e15bdf0e3a36a80bac09fa8c07f8c 4825252 liblucene3-java-doc_3.6.2+dfsg-10+deb9u2_all.deb
 6eeed3719dddd4b5a5eb1e7a592695a17f6f05fb 1563862 liblucene3-java_3.6.2+dfsg-10+deb9u2_all.deb
 9d733c6527db0179561ada2f38357bcd61d2e28b 2039462 libsolr-java_3.6.2+dfsg-10+deb9u2_all.deb
 ebdeae7777fa3ac12de2fbd116ba6210f45f050f 14650 lucene-solr_3.6.2+dfsg-10+deb9u2_amd64.buildinfo
 793b5edc1a5c9acd4a5a4d018da6d336508a571d 144542 solr-common_3.6.2+dfsg-10+deb9u2_all.deb
 7c3ad10de0814e3e9e326f1a30406e6b5365c434 9218 solr-jetty_3.6.2+dfsg-10+deb9u2_all.deb
 729b428f5bb27b6ee04ac1c5303e884084256ed4 9478 solr-tomcat_3.6.2+dfsg-10+deb9u2_all.deb
Checksums-Sha256:
 4fbfe6be7a728ca7bcfc7ab0187fcf051c50a715d88c5a511c95b6c9b4300247 3406 lucene-solr_3.6.2+dfsg-10+deb9u2.dsc
 225c1197ef926d6ee1ba4176c39076aeb30faacaa94c4df834bc561bb2a7bc93 52596 lucene-solr_3.6.2+dfsg-10+deb9u2.debian.tar.xz
 70661bceff8764b86d50d35d119c5ee40718fe3e6a8cb2fadbc2e6217da186c2 10973528 liblucene3-contrib-java_3.6.2+dfsg-10+deb9u2_all.deb
 a927555c9c9064c93933c008a99bb0c2dce296613b3234d44324fdfe74e33cea 4825252 liblucene3-java-doc_3.6.2+dfsg-10+deb9u2_all.deb
 1fd0d4ab25fad3b01168b3d98cd18a4084fe4d2297fc0dc97999620fc5ec0697 1563862 liblucene3-java_3.6.2+dfsg-10+deb9u2_all.deb
 3fb80815debc6e800cc0b236dbb7eda0fad0dbcef7148723c894d0d940b36d6a 2039462 libsolr-java_3.6.2+dfsg-10+deb9u2_all.deb
 3392718c8662aacbf755a2569d1a077ff8d67d84713c14f64ded1f7b62793e3a 14650 lucene-solr_3.6.2+dfsg-10+deb9u2_amd64.buildinfo
 c41dfe3d5ffcfec47d00483d17befe257606db580bcb87129f5ead57939733cb 144542 solr-common_3.6.2+dfsg-10+deb9u2_all.deb
 f49ab3a10d8144aa0097ccdfc4c8429079ffba85cd28cb106a62b6096aa6612e 9218 solr-jetty_3.6.2+dfsg-10+deb9u2_all.deb
 d2304e353c8a3ded16daa756442679221de2df1a40d901f9476e0e2aac66b948 9478 solr-tomcat_3.6.2+dfsg-10+deb9u2_all.deb
Files:
 de7805174082d2984fcb8190c74c9ddd 3406 java optional lucene-solr_3.6.2+dfsg-10+deb9u2.dsc
 676b37e02a387fe9b257cdf59d7962b7 52596 java optional lucene-solr_3.6.2+dfsg-10+deb9u2.debian.tar.xz
 6825a7b3f232adb846d055ce81c43529 10973528 java optional liblucene3-contrib-java_3.6.2+dfsg-10+deb9u2_all.deb
 45214b104614c5bb365729a28cac7d57 4825252 doc optional liblucene3-java-doc_3.6.2+dfsg-10+deb9u2_all.deb
 424fbcf941a0b6d295aad37ca4ee07f5 1563862 java optional liblucene3-java_3.6.2+dfsg-10+deb9u2_all.deb
 9df27fd408d4faa8a61894ec02952908 2039462 java optional libsolr-java_3.6.2+dfsg-10+deb9u2_all.deb
 077b616e17ddf081030e99e96c8f0284 14650 java optional lucene-solr_3.6.2+dfsg-10+deb9u2_amd64.buildinfo
 d29dd03911077793402e5640f30971b8 144542 java optional solr-common_3.6.2+dfsg-10+deb9u2_all.deb
 97c4d294eb9354716e67d0f36ffba3dc 9218 java optional solr-jetty_3.6.2+dfsg-10+deb9u2_all.deb
 867dbc38df6c07783d0211854f0bcda8 9478 java optional solr-tomcat_3.6.2+dfsg-10+deb9u2_all.deb

-----BEGIN PGP SIGNATURE-----
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=D0bh
-----END PGP SIGNATURE-----

Message #26 received at 896604-close@bugs.debian.org (full text, mbox, reply):

From: Markus Koschany <apo@debian.org>

To: 896604-close@bugs.debian.org

Subject: Bug#896604: fixed in lucene-solr 3.6.2+dfsg-5+deb8u2

Date: Mon, 07 May 2018 12:03:18 +0000

Source: lucene-solr
Source-Version: 3.6.2+dfsg-5+deb8u2

We believe that the bug you reported is fixed in the latest version of
lucene-solr, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 896604@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Markus Koschany <apo@debian.org> (supplier of updated lucene-solr package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 02 May 2018 23:43:25 +0200
Source: lucene-solr
Binary: liblucene3-java liblucene3-contrib-java liblucene3-java-doc libsolr-java solr-common solr-tomcat solr-jetty
Architecture: source all
Version: 3.6.2+dfsg-5+deb8u2
Distribution: jessie-security
Urgency: high
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
 liblucene3-contrib-java - Full-text search engine library for Java - additional libraries
 liblucene3-java - Full-text search engine library for Java - core library
 liblucene3-java-doc - Documentation for Lucene
 libsolr-java - Enterprise search server based on Lucene - Java libraries
 solr-common - Enterprise search server based on Lucene3 - common files
 solr-jetty - Enterprise search server based on Lucene3 - Jetty integration
 solr-tomcat - Enterprise search server based on Lucene3 - Tomcat integration
Closes: 896604
Changes:
 lucene-solr (3.6.2+dfsg-5+deb8u2) jessie-security; urgency=high
 .
   * Team upload.
   * Fix CVE-2018-1308: XML external entity expansion in Solr's
     DataImportHandler. It can be used as XXE using file/ftp/http protocols in
     order to read arbitrary local files from the Solr server or the internal
     network. (Closes: #896604)
Checksums-Sha1:
 3e72326c36659a80a8b347cd6a6df8519c1a880f 3374 lucene-solr_3.6.2+dfsg-5+deb8u2.dsc
 e32facb17569c7b2f53da837d4a9666aff337a5d 50916 lucene-solr_3.6.2+dfsg-5+deb8u2.debian.tar.xz
 2a2a22428cf0809a237a9bc5638785c913366cff 1500622 liblucene3-java_3.6.2+dfsg-5+deb8u2_all.deb
 cb7196a3a3a1e5f01570bdd68f12d76fa6f6358f 10896058 liblucene3-contrib-java_3.6.2+dfsg-5+deb8u2_all.deb
 f36e229cbda5c9f667dd8558c2c09190133a7e8a 4836948 liblucene3-java-doc_3.6.2+dfsg-5+deb8u2_all.deb
 8f6b26391bfb35aa033d037f36563484a80d2254 1961392 libsolr-java_3.6.2+dfsg-5+deb8u2_all.deb
 eff4b3045dcab13f46ca0267d7d199e90917db9b 144528 solr-common_3.6.2+dfsg-5+deb8u2_all.deb
 d080e1d0079704fc01ee81b319961c227104e496 8972 solr-tomcat_3.6.2+dfsg-5+deb8u2_all.deb
 39d45e91dc344bc57d9fb7c08af962b3a0a77030 8684 solr-jetty_3.6.2+dfsg-5+deb8u2_all.deb
Checksums-Sha256:
 614fc97761f450b57b99585f83532d9c62ed2639a5d6e69643a164695758fc1b 3374 lucene-solr_3.6.2+dfsg-5+deb8u2.dsc
 0b9ca1b751a02e149d4d4e4cfa3a1e2fca67be961783f3b11cfccfae16aded5e 50916 lucene-solr_3.6.2+dfsg-5+deb8u2.debian.tar.xz
 2a393273513065f9dc62455a0b58ba71a4c8db2fc076abf9c086b1a8d0000726 1500622 liblucene3-java_3.6.2+dfsg-5+deb8u2_all.deb
 b99f5e479ec9a15a9492040f19beb3be255dda328c15a5581703355dd365ebc0 10896058 liblucene3-contrib-java_3.6.2+dfsg-5+deb8u2_all.deb
 026b69ad81270250b5f92f010fe5c740d163e1615f39e72992299335403cee69 4836948 liblucene3-java-doc_3.6.2+dfsg-5+deb8u2_all.deb
 c139d1f0d47d7111ac242888755ee30c853e692fa4904aac4f8c408cbb882556 1961392 libsolr-java_3.6.2+dfsg-5+deb8u2_all.deb
 c80a6b045ed0bc2e264de8ef2ab02bd91144fa469ebd1ad55d7cd63fd25cbbc6 144528 solr-common_3.6.2+dfsg-5+deb8u2_all.deb
 16e42f75599e7a293aa7c7deb49de8df6474a8ac75377dfc24d9746c6cf8a9b0 8972 solr-tomcat_3.6.2+dfsg-5+deb8u2_all.deb
 83dd010cf3948a92829adfb40b0fd66c7013304bc7cc9417b9d0326893e242cc 8684 solr-jetty_3.6.2+dfsg-5+deb8u2_all.deb
Files:
 8a17b4596834420b8e5ca0ae03d30c1c 3374 java optional lucene-solr_3.6.2+dfsg-5+deb8u2.dsc
 f7307d3b9099f0c6841730fb5aeef4a2 50916 java optional lucene-solr_3.6.2+dfsg-5+deb8u2.debian.tar.xz
 515a77f3c8981ca61cff697374305895 1500622 java optional liblucene3-java_3.6.2+dfsg-5+deb8u2_all.deb
 d659cf591344aa6d5dcb33e64f8fced4 10896058 java optional liblucene3-contrib-java_3.6.2+dfsg-5+deb8u2_all.deb
 c790784ae75116ccc379f7f32641dded 4836948 doc optional liblucene3-java-doc_3.6.2+dfsg-5+deb8u2_all.deb
 bd953e062da1f4c94273064fa0d2229e 1961392 java optional libsolr-java_3.6.2+dfsg-5+deb8u2_all.deb
 4102600fb402b978d08a561e2da33137 144528 java optional solr-common_3.6.2+dfsg-5+deb8u2_all.deb
 599be5d3580e6cbbe82c0dc3bb7d763e 8972 java optional solr-tomcat_3.6.2+dfsg-5+deb8u2_all.deb
 bb40871761339b329c89a9ce88a80a13 8684 java optional solr-jetty_3.6.2+dfsg-5+deb8u2_all.deb

-----BEGIN PGP SIGNATURE-----
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=gbXf
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.