You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@ofbiz.apache.org by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2022/05/28 08:09:00 UTC

[jira] [Commented] (OFBIZ-12626) [SECURITY] Upgrade Tika to 1.28.3

    [ https://issues.apache.org/jira/browse/OFBIZ-12626?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17543430#comment-17543430 ] 

ASF subversion and git services commented on OFBIZ-12626:
---------------------------------------------------------

Commit cac40a60328b407357177217949a3a3605167592 in ofbiz-framework's branch refs/heads/release18.12 from Jacques Le Roux
[ https://gitbox.apache.org/repos/asf?p=ofbiz-framework.git;h=cac40a6032 ]

Fixed: [SECURITY] Upgrade Tika to 1.28.3 (OFBIZ-12626)

Apache Tika 1.28.3 contains security-related fixes and dependency upgrades.
Details can be found in the changes file:
https://www.apache.org/dist/tika/1.28.3/CHANGES-1.28.3.txt


> [SECURITY] Upgrade Tika to 1.28.3
> ---------------------------------
>
>                 Key: OFBIZ-12626
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-12626
>             Project: OFBiz
>          Issue Type: Sub-task
>          Components: content, framework/security
>    Affects Versions: 18.12.06, 22.01.01
>            Reporter: Jacques Le Roux
>            Assignee: Jacques Le Roux
>            Priority: Major
>
> As mentionned in https://lists.apache.org/thread/9wkgbq5tsz6shy7m8b9269jofozhfkg1
> bq. Apache Tika 1.28.3 contains security-related fixes and dependency upgrades. Details can be found in the changes file: https://www.apache.org/dist/tika/1.28.3/CHANGES-1.28.3.txt
> And also:
> bq. NOTE: The 1.x branch is now in security-fixes-only mode. The PMC has decided the formal EoL for the 1.x branch is 30 September 2022: https://lists.apache.org/thread/yq6n7o01kw544dvj1jsoqk29g6yqjkp3
> bq. Please upgrade to 2.4.0 at your earliest convenience. For guidance on this upgrade: https://cwiki.apache.org/confluence/display/TIKA/Migrating+to+Tika+2.0.0



--
This message was sent by Atlassian Jira
(v8.20.7#820007)