Funnelback patch 15.6.0.35

  • Released: 2018-12-19

  • Applies to: v15.6.0

  • Internal reference: SUPPORT-2838

Description

Prevents creation of objects within Freemarker template files to ensure that template editors can not cause external code to be executed.

Affected files

  • web/webapps/funnelback-publicui.war

Deployment

  • If the installation has Facebook collections, the Version given to the DefaultFacebookClient should be changed to Version.Latest e.g. new DefaultFacebookClient(Version.LATEST).

  • (Windows only) Stop currently running crawls.

  • Stop the Jetty web server and the Funnelback daemon.

  • Deploy the provided files on top of an existing install, backing up all replaced files.

  • Start the Jetty web server and the Funnelback daemon.

  • (Windows only) start crawls as needed.

  • As patches are cumulative, apply deployment instructions from previous patches.