CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

textproc/apache-solr 10.0.0_1,1

High performance search server built using Lucene Java

Port info

Maintainer
mfechner@FreeBSD.org
Packages
latest: 10.0.0_1,1
Upstream
up to date
Last update
to 10.0.0_1,1 · 1691685481
Quarterly
2026Q4: 10.0.0_1,1
Formerly
textproc/apache-solr9 until 2023-06-18
WWW
https://lucene.apache.org/solr/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install apache-solr
installs 10.0.0_1,1 from latest; from quarterly (2026Q4) 10.0.0_1,1
Port
# cd /usr/ports/textproc/apache-solr && make install clean
# make -C /usr/ports/textproc/apache-solr config  # change options first
Size
334 MiB download · 394 MiB installed
Depends on
java/openjdk25 25.0.4+7.f.1_1, shells/bash 5.3.20
License
APACHE20
Creates
user solr, group solr
Options
0 of 1 on in the package
Show the 1 options that are off
JTS
pkg-message
Shown after installing
Make sure to edit the following files to adapt to your setup:

/usr/local/etc/solr.in.sh
/var/db/solr/solr.xml

All files are configured to have your solr instances running in
/var/db/solr/<instancename>

For more information how to configure solr check the manual:
http://lucene.apache.org/solr/resources.html#documentation

The port is configured to listen only on localhost, port 8983.

To rotate solr log files include /var/log/solr/ to your log rotation
configuration.

To enable the port execute:
sysrc solr_enable="YES"

And start it with:
service solr start
Shown after upgrading
If you update, make sure you update your /usr/local/etc/solr.in.sh
The LOG4J_PROPS has changed.
If you would like to change logging, copy:
cp /usr/local/solr/server/resources/log4j2.xml /var/db/solr/
Change it and make sure it is loaded in /usr/local/etc/solr.in.sh.

Data Import Handler (DIH) has been removed from the base solr and is
available as independent module which can be installed with solr
package manager. The current repo is available at:
https://github.com/rohitbemax/dataimporthandler

Make also sure to always check the manual if you need to modify your
configs or schemas:
https://solr.apache.org/guide/9_0/solr-upgrade-notes.html

Maybe you want also to check some examples:
https://dovecot.org/pipermail/dovecot/2022-May/124701.html
https://dovecot.org/pipermail/dovecot/2022-May/124711.html

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 1610.0.0_1,110.0.0_1,1–
FreeBSD 1510.0.0_1,110.0.0_1,1–
FreeBSD 1410.0.0_1,110.0.0_1,110.0.0_1,1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 1510.0.0_1,110.0.0_1,1–
FreeBSD 1410.0.0_1,110.0.0_1,110.0.0_1,1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (1)

The CVE record lists the packaged version 10.0.0_1,1 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2026-448258.12026-06-01Hardcoded credentials in the Basic Authentication setup tool (bin/solr auth enable) in Apache Solr versions 9.4.0 through 9.10.1 and 10.0.0 allows a remote attacker to g…

VuXML only (0)

Listed in VuXML, the packaged version 10.0.0_1,1 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (3)

Show 3 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (98)

Matthias Fechner (mfechner) · 8.2.0
textproc/apache-solr: update to 8.2.0. Changelog: https://lucene.apache.org/solr/8_2_0/changes/Changes.html#v8.2.0
208e9795c3
Matthias Fechner (mfechner) · 8.1.1
Upgrade to version 8.1.1. For detailed changelog see here: https://lucene.apache.org/solr/8_1_1/changes/Changes.html
6ab91ee6e4
Matthias Fechner (mfechner) · 8.0.0
Upgrade to 8.0.0.

Changelog:
https://www-eu.apache.org/dist/lucene/solr/8.0.0/changes/Changes.html
35278dd418
Matthias Fechner (mfechner) · 7.7.0
Upgrade to 7.7.0.

https://lucene.apache.org/solr/7_7_0/changes/Changes.html#v7.7.0
2a57b9b270
Matthias Fechner (mfechner) · 7.6.0
Upgrade to 7.6.0. http://lucene.apache.org/solr/7_6_0/changes/Changes.html
f2b00a7d79
Matthias Fechner (mfechner) · 7.4.0
textproc/apache-solr upgrade to 7.4.0. For more detail see here: http://lucene.apache.org/solr/7_4_0/changes/Changes.html

Reviewed by:	Ivo de Klerk <ivo@ixp.nl>
Approved by:	tz (mentor)
Differential Revision:	https://reviews.freebsd.org/D17371
7e6d32c7f4
Matthias Fechner (mfechner) · 7.1.0
Changed the MAINTAINER of all my ports to have mfechner@FreeBSD.org listed.

Reviewed by:	tz (mentor)
Approved by:	tz (mentor)
Differential Revision:	https://reviews.freebsd.org/D15270
c31ceab7eb
Larry Rosenman (ler) · 7.1.0
textproc/apache-solr: update to 7.1.0.

Highlights for this Solr release include:
Critical Security Update: Fix for CVE-2017-12629 which is a working 0-day exploit reported on the public mailing list.
Auto-scaling: Solr can now move replicas automatically when a new node is added or an existing node is removed using the auto scaling policy framework introduced in 7.0
Auto-scaling: The 'autoAddReplicas' feature which was limited to shared file systems is now available for all file systems. It has been ported to use the new autoscaling framework internally.
Auto-scaling: New set-trigger, remove-trigger, set-listener, remove-listener, suspend-trigger, resume-trigger APIs
Auto-scaling: New /autoscaling/history API to show past autoscaling actions and cluster events
New JSON based Query DSL for Solr that extends JSON Request API to also support all query parsers and their nested parameters
JSON Facet API: min/max aggregations are now supported on single-valued date fields
Lucene's Geo3D (surface of sphere & ellipsoid) is now supported on spatial RPT fields by setting spatialContextFactory="Geo3D". Furthermore, this is the first time Solr has out of the box support for polygons
Expanded support for statistical stream evaluators such as various distributions, rank correlations, distances and more.
Multiple other optimizations and bug fixes

PR:		223073
Submitted by:	idefix@fechner.net (Maintainer)
Security:	CVE-2017-12629
be34a0c515
Larry Rosenman (ler) · 7.0.1
textproc/apache-solr: upgrade to 7.0.1

PR:		222932
Submitted by:	idefix@fechner.net (maintainer)
86a88c2df0
Richard Gallamore (ultima) · 6.5.1_1
* Fixed uid:gid of solr directories

PR:		220001
Submitted by:	Matthias Fechner <idefix@fechner.net> (maintainer), Reshad Patuck <reshadpatuck1@gmail.com>
Reviewed by:	lifanov (mentor)
Approved by:	lifanov (mentor)
Differential Revision:	https://reviews.freebsd.org/D11501
a4c4f75fb2
Kurt Jaeger (pi) · 6.5.1
textproc/apache-solr: update 6.5.0 -> 6.5.1

PR:		218971
Changes:	http://lucene.apache.org/solr/6_5_1/changes/Changes.html
Submitted by:	Matthias Fechner <idefix@fechner.net> (maintainer)
5b1452b186
Larry Rosenman (ler) · 6.5.0_1
Stock apache-solr scripts use lsof during startup to check if Solr started properly.

When deploying Apache Solr in Jail lsof needs access to /dev/mem which is not allowed by default. Lack of the access makes the startup script run in the loop for 3 minutes and then it assumes that it might have succeed.

Allowing access to /dev/mem makes running Solr in Jail a bit pointless.

Following patch changes the behaviour of Solr startup script to use sockstat instead of lsof to check if Solr has already started. This also makes the dependency on lsof obsolete.

While here, pet portlint.

PR:	218654
Submitted by:	Wiktor Niesiobedzki <bsd@vink.pl>
Approved by:	 idefix@fechner.net (maintainer), adamw (mentor)
Differential Revision:	https://reviews.freebsd.org/D10416
54c9fec60a
Martin Wilke (miwi) · 6.5.0
- Update to 6.5.0

PR:		218523
Submitted by:	maintainer
bca5ef14f0
Vanilla I. Shu (vanilla) · 6.4.0
Update to 6.4.0.

PR:		216341
Submitted by:	maintainer
dc9fbae10c
Matthew Seaman (matthew) · 6.3.0
Update to 6.3.0

PR:		215389
Submitted by:	idefix@fechner.net (maintainer)
b45c4cafd1
Kurt Jaeger (pi) · 6.2.0
textproc/apache-solr: 5.5.2 -> 6.2.0

- submitter becomes maintainer

PR:		201455,	212313
Changes:	https://lucene.apache.org/solr/6_2_0/changes/Changes.html
Submitted by:	Matthias Fechner <idefix@fechner.net>
608d67d39e
Pawel Pekala (pawel) · 5.5.2
Update to version 5.5.2

PR:		211286 (based on)
Submitted by:	ari@ish.com.au
1da53cbcac
Dmitry Marakasov (amdmi3) · 5.2.1_1
- Fix trailing whitespace in pkg-descrs, categories [p-x]*

Approved by:	portmgr blanket
1f8b48b772
Mathieu Arnold (mat) · 5.2.1_1
Remove UNIQUENAME and LATEST_LINK.

UNIQUENAME was never unique, it was only used by USE_LDCONFIG and now,
we won't have conflicts there.

Use PKGBASE instead of LATEST_LINK in PKGLATESTFILE, the *only* consumer
is pkg-devel, and it works just fine without LATEST_LINK as pkg-devel
has the correct PKGNAME anyway.

Now that UNIQUENAME is gone, OPTIONSFILE is too. (it's been called
OPTIONS_FILE now.)

Reviewed by:	antoine, bapt
Exp-run by:	antoine
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D3336
21a283f3be
Kurt Jaeger (pi) · 5.2.1_1
textproc/apache-solr: fixing the port, providing missing files

- Provide missing files like bin/solr and bin/post
- still open: provide a working startup script and some instructions
  on how to configure

PR:		201455
Submitted by:	idefix@fechner.net, elferdo@gmail.com
b23b1ef0a5
Kurt Jaeger (pi) · 5.2.1
textproc/apache-solr: 4.10.4 -> 5.2.1

Changes see:
http://lucene.apache.org/solr/5_2_1/changes/Changes.html
a452d76770
Xin LI (delphij) · 4.10.4
Update to 4.10.4.
b07ec36090
Mathieu Arnold (mat) · 4.10.1
MASTER_SITES cleanup.

- Replace ${MASTER_SITE_FOO} with FOO.
- Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9%
  of the time.)
- Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and
  no hint of what it should be was present.
- Fix some logic.
- And generally, make things more simple and easy to understand.

While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and
SAMBA macros.

Also, replace some EXTRACT_SUFX occurences with USES=tar:*.

Checked by:	make fetch-urlall-list
With hat:	portmgr
Sponsored by:	Absolight
60d1a83c2a
Sunpoet Po-Chuan Hsieh (sunpoet) · 4.10.1
- Add CPE information

PR:		199032
Submitted by:	shun <shun.fbsd.pr@dropcut.net>
5a67887642
Greg Lewis (glewis) · 4.10.1
. Allow Apache Solr to be run with either openjdk7 or openjdk8.

PR:		195860
Submitted by:	paul@gromit.dlib.vt.edu
63cc5ce1c4
John Marino (marino) · 4.10.1
textproc/apache-solr: Reset maintainer

There's been 3 consecutive PR timeouts on this port (two still pending
from early December).  The last sighting of former maintainer was
November 2013 and he didn't stage the port (strike 4).  That's the
justification for the reset.
db0c2c9741
Kurt Jaeger (pi) · 4.10.1
textproc/apache-solr: 4.8.1 -> 4.10.1

Changes see:
http://lucene.apache.org/solr/4_10_1/changes/Changes.html

PR:		193290
Submitted by:	Radim Kolar <hsn@sendmail.cz>
Approved by:	gaod@hychen.org (maintainer timeout)
a169089b3d
Adam Weinberger (adamw) · 4.8.1
Convert a bunch of EXTRACT_SUFX=... into USES=tar:...

Approved by:	portmgr (not really, but touches unstaged ports)
a84c115a09
Martin Wilke (miwi) · 4.8.1
- Update to 4.8.1

PR:		190449
Submitted by:	Larry Rosenman
ad7014650e
Mathieu Arnold (mat) · 4.6.0
- Convert to staging - Add license - Convert to options helpers

Sponsored by:	Absolight
3e0a2d7508
Baptiste Daroussin (bapt) · 4.6.0
Fix properties on pkg-plist
e04b632220
Olli Hauer (ohauer) · 4.6.0
- rename AL2 to APACHE20 in Mk/bsd.licenses.db.mk - svn move Templates/Licenses/AL2 Templates/Licenses/APACHE20 - add APACHE10 and APACHE11 to Mk/bsd.licenses.db.mk - add entry in UPDATING - bulk change all ports AL2 => APACHE20

- math/openfst/pkg-plist: remove share/licenses/openfst-1.3.4

PR:		ports/184785
Submitted by:	ohauer
Reviewed by:	tabthorpe
Approved by:	portmgr (tabthorpe@)
4fb1cfb1cd
Sunpoet Po-Chuan Hsieh (sunpoet) · 4.6.0
- Update to 4.6.0

Changes:	http://lucene.apache.org/solr/4_6_0/changes/Changes.html
PR:		ports/184262
Submitted by:	Hung-Yi Chen <gaod@hychen.org> (maintainer)
b02f9df708
Sunpoet Po-Chuan Hsieh (sunpoet) · 4.5.1
- Update to 4.5.1

Changes:	http://lucene.apache.org/solr/4_5_1/changes/Changes.html
PR:		ports/184155
Submitted by:	Hung-Yi Chen <gaod@hychen.org> (maintainer)
ff3742eb85
Baptiste Daroussin (bapt) · 4.4.0
Add NO_STAGE all over the place in preparation for the staging support (cat: textproc)
0068f2d47f
Vanilla I. Shu (vanilla) · 4.4.0
Upgrade to 4.4.0.

PR:		ports/181539
Submitted by:	maintainer
6df3df6f47
Martin Wilke (miwi) · 4.3.1
- Update to 4.1.3

PR:		179982
5cac952b0d
Vanilla I. Shu (vanilla) · 4.3.0
Upgrade to 4.3.0.

PR:		ports/179516
Submitted by:	maintainer
22cd07b467
Pawel Pekala (pawel) · 4.2.0
- Update to version 4.2.0 [1] - Convert to OptionsNG - Fix WWW: line in pkg-descr

PR:		ports/176876 [1]
Submitted by:	Hung-Yi Chen <gaod@hychen.org> (maintainer)
22e4fe400e
Vanilla I. Shu (vanilla) · 4.1.0
1: repo-copy apache-solr3 from apache-solr 2: upgrade apache-solr3 to 3.6.2. 3: upgrade apache-solr to 4.1.0.

PR:		ports/176237
Submitted by:	maintainer
6cfc5a8173
Baptiste Daroussin (bapt) · 3.6.0
Decommissioning java 1.5 (EOLed since October 2009): suppress any reference to JAVA_VERSION=	1.5+ (part3)
9c526f7217
Jason Helfman (jgh) · 3.6.0
- Update to 3.6.0, and pass maintainership to submitter [1] - while here... [2]  - Add AL2 License  - drop unneeded usage of bsd.port.pre.mk  - standardize on MASTER_SITES  - standardize on install, use COPYTREE_SHARE in favor of CP  - use PORTEXAMPLES, and have plist follow PR:	ports/167511 Submitted by:	gaod@hychen.org [1], jgh@ [2] Approved by:	maintainer, gslin@gslin.org [1], new maintainer ga
118b30124d
Ruslan Makhmatkhanov (rm) · 3.5.0
- update to 3.5.0

PR:		163859
Submitted by:	Hung-Yi Chen <gaod at cse dot tw>
Approved by:	maintainer
a03386997b
Michael Scheidell (scheidell) · 3.4.0
-Update to 3.4.0

PR:		ports/162281
Submitted by:	Hung-Yi Chen <gaod@hychen.org>
Approved by:	gslin@gslin.org (maintainer timeout, 30 days), mentor (gabor)
Feature safe:	yes
5902ff20f1
Martin Wilke (miwi) · 3.2.0
- Update to 3.2.0

PR:		157926
Submitted by:	maintainer
dcbefca28f
Sahil Tandon (sahil) · 1.4.1
- Update to 1.4.1

PR:		ports/148355
Submitted by:	Gea-Suan Lin <gslin@gslin.org> (maintainer)
Approved by:	wxs@/itetcu@ (mentors, implicit)
Feature safe:	yes
ac457a5dcf
Tong LIU (nemoliu) · 1.4.0
- Update to 1.4.0

PR:	ports/142762
Submitted by:	Gea-Suan Lin <gslin@gslin.org> (maintainer)
0f40e9df5c
Martin Wilke (miwi) · 1.3.0
Solr is an open source enterprise search server based on the Lucene Java search library, with XML/HTTP and JSON APIs, hit highlighting, faceted search, caching, replication, a web administration interface and many more features. It runs in a Java servlet container such as Tomcat.

WWW:	http://lucene.apache.org/solr/

PR:		ports/132665
Submitted by:	Gea-Suan Lin <gslin at gslin.org>
1d298e91fb