Upgrade SOLR to mitigate security risks in ColdFusion (2021 release)

Поиск

Последнее обновление 30 мая 2023 г.

Примечание.

We recommend that you back up the following files:

Pre-requisite

Download the zip file from the link provided in this doc and unzip the files. You'll then copy these files to their respective locations.

To upgrade to SOLR 8.11.2, follow the steps below:

Copy schema.xml to [SOLR_HOME]/template/conf.
Copy solr.war to [JETTY_HOME]/webapps.
Copy solr.xml to [JETTY_HOME]/solr.
Edit the start.ini file in [JETTY_HOME] and add the following flags:
- -Dsolr.disable.shardsWhitelist=true
- -Dsolr.http1=true
Restart Jetty.

After upgrading SOLR, you have the following options.

Follow the steps below:

Go to the location of each collection and open the file managed-schema.xml in [COLLECTION_NAME]/conf.
Replace all occurrences of <filter class="solr.StandardFilterFactory"/> with an empty string.

Примечание.

The filter StandardFilterFactory is no longer operational in SOLR.
Restart Jetty.

Follow the steps below:

Delete all existing collections using one of the following ways:
1. Via the ColdFusion Administrator.
2. Delete the collections by manually deleting the collection directories present at [JETTY_HOME]/multicore/collections.
3. Use the cfcollection tag to delete the collections programmatically. For more information, see cfcollection tag.
Restart Jetty.
Recreate the collections using ColdFusion Administrator or your CFML application.
Re-index the data using ColdFusion Administrator or your CFML application.