Re: cve-2017-

Thanks, very helpful. We make an internal Jira for every Solr vulnerability and I was checking this one out this week. wunder Walter Underwood wun...@wunderwood.org http://observer.wunderwood.org/ (my blog) > On Feb 28, 2019, at 9:23 PM, Tomás Fernández Löbbe > wrote: > > I updated the descr

Re: cve-2017-

I updated the description of SOLR-12770 a bit. The problem stated is that, since the "shards" parameter allows any URL, someone could make an insecure Solr instance hit some other (secure) web endpoint. Solr would throw an exception, but the error

Solr Reference Guide for version 7.7

Hi, Understand that Solr 7.7.1 has just been released, but Solr 7.7.0 has been released almost a month ago. However, from http://lucene.apache.org/solr/guide/, I still could not access the guide for version 7.7, the latest version is still 7.6. Is there any plans to release the guide for 7.7, or

Re: MLT and facetting

The last time I looked, the MLT was a search handler but not a search component. It wasn’t able to be combined with other features. The handler is based on very old code, like 1.3. wunder Walter Underwood wun...@wunderwood.org http://observer.wunderwood.org/ (my blog) > On Feb 28, 2019, at 5:4

Re: MLT and facetting

I’m more curious what you’d expect to see, and what possible benefit you could get from it > On Feb 28, 2019, at 8:48 PM, Zheng Lin Edwin Yeo wrote: > > Hi Martin, > > I have no idea on this, as the case has not been active for almost 2 years. > Maybe I can try to follow up. > > Faceting by d

Re: MLT and facetting

Hi Martin, I have no idea on this, as the case has not been active for almost 2 years. Maybe I can try to follow up. Faceting by default will show the list according to the number of occurrences. But I'm not sure how it will affect the MLT score or how it will be output when combine together, as

Apache Solr 7.7.1 released

1 March 2019, Apache Solr™ 7.7.1 available The Lucene PMC is pleased to announce the release of Apache Solr 7.7.1 Solr is the popular, blazing fast, open source NoSQL search platform from the Apache Lucene project. Its major features include powerful full-text search, hit highlighting, faceted se

Apache Lucene 7.7.1 released

1 March 2019, Apache Solr™ 7.7.1 available The Lucene PMC is pleased to announce the release of Apache Solr 7.7.1 Solr is the popular, blazing fast, open source NoSQL search platform from the Apache Lucene project. Its major features include powerful full-text search, hit highlighting, faceted se

Apache Solr 7.7.1 released

1 March 2019, Apache Solr™ 7.7.1 available The Lucene PMC is pleased to announce the release of Apache Solr 7.7.1 Solr is the popular, blazing fast, open source NoSQL search platform from the Apache Lucene project. Its major features include powerful full-text search, hit highlighting, faceted se

cve-2017-

This particular cve came out in the mailing list. Fed 12th CVE-2017-3164 SSRF issue in Apache Solr I need to know what the exploit for this could be? can a user send a bogus shards param via a web request and get a local file? What does an attack vector look like for this? I am being aske

RE: Index database with SolrJ using xml file directly throws an error

The parameter "dataConfig" should hold an actual xml document to override the data-config.xml file you store in zookeeper (cloud) or the configuration directory (standalone). Typically you do not use this parameter. Instead, specify the "config" parameter with the filename (eg. data-config.xml

Re: Index database with SolrJ using xml file directly throws an error

That error usually means there are characters (even spaces) at the _beginning_ of the xml file. DIH may be more forgiving on that front. Basically, anything preceding the opening tag may cause this error. Best, Erick On Thu, Feb 28, 2019 at 8:24 AM sami wrote: > > I would like to index my datab

Index database with SolrJ using xml file directly throws an error

I would like to index my database using SolrJ Java API. I have already tried to use DIH directly from the Solr server. It works and indexes well. But when I would like to use the same XML config file with SolrJ it throws an error. **Solr version 7.6.0 SolrJ 7.6.0** Here is the full code I am usi

Re: Full import alternatives

Hi Shawan, can you please suggest a small program or atleast a backbone of a program which can give me hints how exactly to achieve, I quote: "I send a full-import DIH command to all of the shards, and each one makes an SQL query to MySQL, all of them running in parallel. " -- Sent from: http://