You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@nifi.apache.org by "Bryan Bende (Jira)" <ji...@apache.org> on 2019/09/24 17:16:00 UTC

[jira] [Resolved] (NIFI-6520) Upgrade to latest Apache Tika 1.22

     [ https://issues.apache.org/jira/browse/NIFI-6520?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Bryan Bende resolved NIFI-6520.
-------------------------------
    Resolution: Fixed

Looks like this PR was merged

> Upgrade to latest Apache Tika 1.22
> ----------------------------------
>
>                 Key: NIFI-6520
>                 URL: https://issues.apache.org/jira/browse/NIFI-6520
>             Project: Apache NiFi
>          Issue Type: Task
>            Reporter: Joseph Witt
>            Assignee: Joseph Witt
>            Priority: Major
>             Fix For: 1.10.0
>
>          Time Spent: 20m
>  Remaining Estimate: 0h
>
> [CVE-2019-10088] OOM from a crafted Zip File in Apache Tika's RecursiveParserWrapper
> [CVE-2019-10093] Denial of Service in Apache Tika's 2003ml and 2006ml Parsers
> [CVE-2019-10094] StackOverflow from Crafted Package/Compressed Files in Apache Tika's RecursiveParserWrapper
> Not really a blocker but upgrading is generally extremely easy and we should knock it out.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)