You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@ofbiz.apache.org by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2022/02/12 10:49:00 UTC
[jira] [Commented] (OFBIZ-12573) CLONE - [SECURITY] Upgrade Tika to 1.28.1
[ https://issues.apache.org/jira/browse/OFBIZ-12573?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17491330#comment-17491330 ]
ASF subversion and git services commented on OFBIZ-12573:
---------------------------------------------------------
Commit d4834a0e3a6c2d8f04f1c68e8bafca49b385e6b9 in ofbiz-framework's branch refs/heads/release18.12 from Jacques Le Roux
[ https://gitbox.apache.org/repos/asf?p=ofbiz-framework.git;h=d4834a0 ]
Fixed: CLONE - [SECURITY] Upgrade Tika to 1.28.1 (OFBIZ-12573)
Simpler for now, later OFBIZ 12573 needs to be done
Also formatting improvement in DataResourceWorker.java: removes a blank lines
Thanks: Tim Allison <ta...@apache.org> for the nice exchanges :)
> CLONE - [SECURITY] Upgrade Tika to 1.28.1
> -----------------------------------------
>
> Key: OFBIZ-12573
> URL: https://issues.apache.org/jira/browse/OFBIZ-12573
> Project: OFBiz
> Issue Type: Sub-task
> Components: content, framework/security
> Affects Versions: 18.12.06, 22.01.01
> Reporter: Jacques Le Roux
> Assignee: Jacques Le Roux
> Priority: Major
>
> Here the Tika announce:
> {quote}
> The Apache Tika project is pleased to announce the release of Apache
> Tika 1.28.1. The release contents have been pushed out to the main
> Apache release site and to the Maven Central sync.
> Apache Tika is a toolkit for detecting and extracting metadata and
> structured text content from various documents using existing parser
> libraries.
> Apache Tika 1.28.1 contains security-related and general
> dependency upgrades. Details can be found in the changes file:
> https://www.apache.org/dist/tika/1.28.1/CHANGES-1.28.1.txt
> NOTE: The 1.x branch is now in security-fixes-only mode. The PMC
> has decided the formal EoL for the 1.x branch is 30 September 2022:
> https://lists.apache.org/thread/yq6n7o01kw544dvj1jsoqk29g6yqjkp3
> Please upgrade to 2.3.0 at your earliest convenience. For guidance on this
> upgrade:
> https://cwiki.apache.org/confluence/display/TIKA/Migrating+to+Tika+2.0.0
> {quote}
--
This message was sent by Atlassian Jira
(v8.20.1#820001)