Release Notes

Lucene

8.11.5 (NES) - March 25, 2025

Bug Fixes

This release patches the following:

• CVE-2024-45772: Deserialization of Untrusted Data.
• Full Version: 8.11.4-solr-8.11.5

8.11.5-trial (NES) - March 25, 2025

Notes

• This release originates from the open‑source Apache Lucene and Solr project forked by HeroDevs.
• This release contains no functional changes from Lucene and Solr version 8.11.4.
• Full Version: 8.11.4-solr-8.11.5-trial

Solr

8.11.5 (NES) - March 25, 2025

Bug Fixes

This release patches the following:

• CVE-2024-52012: Relative Path Traversal vulnerability.
  • Assessed OSS 8.11.4 for impact and found not applicable.
• CVE-2025-24814: Execution with Unnecessary Privileges.
  • <lib> usage disabled in solrconfig.xml by default
  • solr.config.lib.enabled can be used to enable/disable <lib> usage
• Full Version: 8.11.4-solr-8.11.5

8.11.5-trial (NES) - March 25, 2025

Notes

• This release originates from the open‑source Apache Lucene and Solr project forked by HeroDevs.
• This release contains no functional changes from Lucene and Solr version 8.11.4.
• Full Version: 8.11.4-solr-8.11.5-trial