search

sleuthkit / autopsy

Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.
http://www.sleuthkit.org/autopsy/
2.41k stars 597 forks source link

Solr upgrade #6433

Closed zorovj closed 2 years ago

zorovj commented 3 years ago

Hello,

I have been trying to figure out how to use solr 8.6.2 or 8.6.3 with autopsy for a multi user setup, but didn't find a solution. The version mentioned in the document is EOL and so cannot be used in our environment. Is it upgraded to support the latest version? if yes where can I find the documentation to configure it?

Thanks!

esaunders commented 3 years ago

Support for Solr 8 is currently being worked on and will hopefully appear in a forthcoming release. In the meantime, as stated in the documentation (http://sleuthkit.org/autopsy/docs/user-docs/4.17.0/install_solr_page.html), "The Apache Solr 4.10.3-0 installation package. This is no longer available from its original source, but you can find it on our site: https://sourceforge.net/projects/autopsy/files/CollaborativeServices/Solr"

zorovj commented 3 years ago

Hi, Apache Solr 4.10.3-0 has many vulnerabilities including a RCE. There should be any other alternative or some way to use it securely.

rcordovano commented 3 years ago

@zorovj, as @esaunders mentioned above, we are working on an upgrade to Solr 8.6.3. We are currently on track for including the upgrade in the Autopsy 4.18.0 release that is scheduled to come out in January 2021.

esaunders commented 3 years ago

And even after the upgrade you will need to be familiar with how to run it securely.

https://cwiki.apache.org/confluence/display/solr/SolrSecurity

zorovj commented 3 years ago

Hello,

May I know when will autopsy 4.18 release? I can see the documentation with solr upgrade for 4.18 - https://sleuthkit.org/autopsy/docs/user-docs/4.18.0/ But the download link only has 4.17 version yet. - https://www.autopsy.com/download/ Also does version 4.17 work with solr 8.6.3 or not?

rcordovano commented 3 years ago

I believe we will have a release by mid to late April, possibly sooner.