You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@ofbiz.apache.org by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2022/02/12 10:49:00 UTC

[jira] [Commented] (OFBIZ-12573) CLONE - [SECURITY] Upgrade Tika to 1.28.1

    [ https://issues.apache.org/jira/browse/OFBIZ-12573?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17491330#comment-17491330 ] 

ASF subversion and git services commented on OFBIZ-12573:
---------------------------------------------------------

Commit d4834a0e3a6c2d8f04f1c68e8bafca49b385e6b9 in ofbiz-framework's branch refs/heads/release18.12 from Jacques Le Roux
[ https://gitbox.apache.org/repos/asf?p=ofbiz-framework.git;h=d4834a0 ]

Fixed: CLONE - [SECURITY] Upgrade Tika to 1.28.1 (OFBIZ-12573)

Simpler for now, later OFBIZ 12573 needs to be done
Also formatting improvement in DataResourceWorker.java: removes a blank lines

Thanks: Tim Allison <ta...@apache.org> for the nice exchanges :)


> CLONE - [SECURITY] Upgrade Tika to 1.28.1
> -----------------------------------------
>
>                 Key: OFBIZ-12573
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-12573
>             Project: OFBiz
>          Issue Type: Sub-task
>          Components: content, framework/security
>    Affects Versions: 18.12.06, 22.01.01
>            Reporter: Jacques Le Roux
>            Assignee: Jacques Le Roux
>            Priority: Major
>
> Here the Tika announce:
> {quote}
> The Apache Tika project is pleased to announce the release of Apache
> Tika 1.28.1. The release contents have been pushed out to the main
> Apache release site and to the Maven Central sync.
> Apache Tika is a toolkit for detecting and extracting metadata and
> structured text content from various documents using existing parser
> libraries.
> Apache Tika 1.28.1 contains security-related and general
> dependency upgrades. Details can be found in the changes file:
> https://www.apache.org/dist/tika/1.28.1/CHANGES-1.28.1.txt
> NOTE: The 1.x branch is now in security-fixes-only mode. The PMC
> has decided the formal EoL for the 1.x branch is 30 September 2022:
> https://lists.apache.org/thread/yq6n7o01kw544dvj1jsoqk29g6yqjkp3
> Please upgrade to 2.3.0 at your earliest convenience. For guidance on this
> upgrade:
> https://cwiki.apache.org/confluence/display/TIKA/Migrating+to+Tika+2.0.0
> {quote}



--
This message was sent by Atlassian Jira
(v8.20.1#820001)