Lucene PMC 宣布发布 Apache Lucene 6.6.2 和Apache Solr 6.6.2 。 Lucene可从 http://www.apache.org/dyn/closer.lua/lucene/java/6.6.2 下载 Solr可以从 http://www.apache.org/dyn/closer.lua/lucene/solr/6.6.2 下载 Lucene版本的亮点包括: Disallow resolving of external entities in queryparser/xml/CoreParser by default. Solr版本的亮点包括 : Critical security fix: Fix for a 0-day exploit (CVE-2017-12629), details: https://s.apache.org/FJDl. RunExecutableListener has been disabled by default (can be enabled by -Dsolr.enableRunExecutableListener=true) and resolving external entities in the XML query parser (defType=xmlparser or {!xmlparser ... }) is disabled by default. Fix a bug where Solr was attempting to load the same core twice (Error message: "Lock held by this virtual machine"). 更多请查看发布主页。 Apache Lucene 6.6.2 和Apache Solr 6.6.2 发布,Java 搜索引擎下载地址