[Git][security-tracker-team/security-tracker][master] CVE-2019-0193 restore previously assigned custom severity
Salvatore Bonaccorso
carnil at debian.org
Thu Oct 10 16:50:44 BST 2019
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
6fdc7a76 by Salvatore Bonaccorso at 2019-10-10T15:50:11Z
CVE-2019-0193 restore previously assigned custom severity
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -50019,7 +50019,7 @@ CVE-2019-0195 (Manipulating classpath asset file URLs, an attacker could guess t
CVE-2019-0194 (Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 ...)
NOT-FOR-US: Apache Camel
CVE-2019-0193 (In Apache Solr, the DataImportHandler, an optional but popular module ...)
- - lucene-solr 3.6.2+dfsg-22
+ - lucene-solr 3.6.2+dfsg-22 (low)
NOTE: https://issues.apache.org/jira/browse/SOLR-13669
NOTE: upstream recommends everybody upgrade or rework their configuration
NOTE: consider backporting enable.dih.dataConfigParam instead:
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6fdc7a76caccb728d7e02093a673ed8d71360c2a
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6fdc7a76caccb728d7e02093a673ed8d71360c2a
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191010/2074a158/attachment.html>
More information about the debian-security-tracker-commits
mailing list