Security Bulletin: IBM InfoSphere BigInsights 4.2 is affected by Open Source vulnerabilities in Hadoop (CVE-2016-3086, CVE-2016-5001) and Solr (CVE-2017-3163)

Summary IBM InfoSphere BigInsights 4.2 is affected by Open Source vulnerabilities in Hadoop CVE-2016-3086, CVE-2016-5001 and Solr CVE-2017-3163 Vulnerability Details CVEID: CVE-2016-3086 DESCRIPTION: Apache Hadoop could allow a remote attacker to obtain sensitive information, caused by a flaw in...

com.datasalt.pangool:pangool-core (>=0.40, <=0.43.3), com.datasalt.pangool:pangool-examples (>=0.40, <=0.43.3) +15 more potentially affected by CVE-2017-3163 via org.apache.solr:solr-core (3.3.0)

org.apache.solr:solr-core MAVEN version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - com.datasalt.pangool:pangool-core =0.40, =0.40, =3.0-rc2, =4.0.0.alpha1, =4.0.0.alpha1, =4.0.0.beta1 and more...

com.chenlb.mmseg4j:mmseg4j-for-solr32 (1.0.0), org.apache.solr:solr (3.2.0) +23 more potentially affected by CVE-2017-3163 via org.apache.solr:solr-core (3.2.0)

org.apache.solr:solr-core MAVEN version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - com.chenlb.mmseg4j:mmseg4j-for-solr32 1.0.0 - org.apache.solr:solr 3.2.0 - org.apache.solr:solr-analysis-extr...

com.findwise.hydra:hydra-solr-in (>=0.3.1, <=0.4.5), com.google.code:lucene-gosen-ipadic (1.2.1) +20 more potentially affected by CVE-2017-3163 via org.apache.solr:solr-core (3.4.0)

org.apache.solr:solr-core MAVEN version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - com.findwise.hydra:hydra-solr-in =0.3.1, =1.9.0, =1.11.0, =4.0.0.beta2, =4.0.0.beta2, =4.0.0.final and more...

com.github.jknack:mwa-solr3 (>=0.3.11, <=0.4.2), com.github.shyiko.rook:rook-target-hibernate4-fulltextindex (>=0.1.0, <=0.1.3) +39 more potentially affected by CVE-2017-3163 via org.apache.solr:solr-core (3.6.2)

org.apache.solr:solr-core MAVEN version 3.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - com.github.jknack:mwa-solr3 =0.3.11, =0.1.0, =3.2.0, =4.0.0, =2.3.2, =2.3.2, =3.2.17, =3.2.23, =1.1.9, =1.1.1...

com.github.jknack:mwa-solr4 (>=0.3.11, <=0.4.0), org.apache.jackrabbit:oak-solr-embedded (>=0.11, <=0.17.1) +11 more potentially affected by CVE-2017-3163 via org.apache.solr:solr-core (4.1.0)

org.apache.solr:solr-core MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - com.github.jknack:mwa-solr4 =0.3.11, =0.11, =0.11, =0.17.1 - org.apache.solr:solr 4.1.0 -...

de.eonas.portal:opencmsinstaller (>=9.0.0.1, <=9.5.2.0), de.eonas.portal:opencmsportaldriver (>=9.5.1.0, <=9.5.2.0) +22 more potentially affected by CVE-2017-3163 via org.apache.solr:solr-core (4.3.0)

org.apache.solr:solr-core MAVEN version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - de.eonas.portal:opencmsinstaller =9.0.0.1, =9.5.1.0, =9.0.1, =9.0.0, =9.0.1, =9.0.0, =9.0.1, =9.0.0, =9.0.0,...

com.chenlb.mmseg4j:mmseg4j-for-solr40 (1.0.0), com.chenlb.mmseg4j:mmseg4j-solr (1.9.0) +25 more potentially affected by CVE-2017-3163 via org.apache.solr:solr-core (4.0.0)

org.apache.solr:solr-core MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - com.chenlb.mmseg4j:mmseg4j-for-solr40 1.0.0 - com.chenlb.mmseg4j:mmseg4j-solr 1.9.0 -...

org.apache.solr:solr (4.0.0-alpha), org.apache.solr:solr-analysis-extras (4.0.0-alpha) +8 more potentially affected by CVE-2017-3163 via org.apache.solr:solr-core (4.0.0-alpha)

org.apache.solr:solr-core MAVEN version 4.0.0-alpha is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - org.apache.solr:solr 4.0.0-alpha - org.apache.solr:solr-analysis-extras 4.0.0-alpha -...

org.apache.solr:solr (4.0.0-beta), org.apache.solr:solr-analysis-extras (4.0.0-beta) +8 more potentially affected by CVE-2017-3163 via org.apache.solr:solr-core (4.0.0-beta)

org.apache.solr:solr-core MAVEN version 4.0.0-beta is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - org.apache.solr:solr 4.0.0-beta - org.apache.solr:solr-analysis-extras 4.0.0-beta -...

com.chenlb.mmseg4j:mmseg4j-all (1.8.6), com.chenlb.mmseg4j:mmseg4j-all-with-dic (1.8.6) +22 more potentially affected by CVE-2017-3163 via org.apache.solr:solr-core (3.1.0)

org.apache.solr:solr-core MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - com.chenlb.mmseg4j:mmseg4j-all 1.8.6 - com.chenlb.mmseg4j:mmseg4j-all-with-dic 1.8.6 -...

org.apache.carbondata:carbondata-datamap-examples (>=1.4.0, <=1.6.1), org.apache.carbondata:carbondata-examples (>=2.0.0, <=2.2.0) +10 more potentially affected by CVE-2017-3163 via org.apache.solr:solr-core (6.3.0)

org.apache.solr:solr-core MAVEN version 6.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - org.apache.carbondata:carbondata-datamap-examples =1.4.0, =2.0.0, =1.6.0, =1.4.0, =2.0.0,...

org.apache.carbondata:carbondata-datamap-examples (>=1.4.0, <=1.6.1), org.apache.carbondata:carbondata-examples (>=2.0.0, <=2.2.0) +10 more potentially affected by CVE-2017-3163 via org.apache.solr:solr-core (6.3.0)

org.apache.solr:solr-core MAVEN version 6.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - org.apache.carbondata:carbondata-datamap-examples =1.4.0, =2.0.0, =1.6.0, =1.4.0, =2.0.0,...

Important: Red Hat Security Advisory: eap6-jboss-ec2-eap security update

An update for jboss-ec2-eap is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.20 security update

An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.20 security update

An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.20 security update

An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

[SECURITY] [DSA 4124-1] lucene-solr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4124-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 27, 2018 https://www.debian.org/security/faq -...

DEBIAN-CVE-2017-3163

When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr before 5.5.4 and 6.x before 6.4.1 did not validate the file name, hence it was possible to craft a special request involving path...

org.apache.carbondata:carbondata-datamap-examples (>=1.4.0, <=1.6.1), org.apache.carbondata:carbondata-examples (>=2.0.0, <=2.2.0) +10 more potentially affected by CVE-2017-3163 via org.apache.solr:solr-core (6.3.0)

org.apache.solr:solr-core MAVEN version 6.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - org.apache.carbondata:carbondata-datamap-examples =1.4.0, =2.0.0, =1.6.0, =1.4.0, =2.0.0,...