[ https://issues.apache.org/jira/browse/NIFI-4806?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16648279#comment-16648279 ]
ASF GitHub Bot commented on NIFI-4806: -------------------------------------- GitHub user mcgilman opened a pull request: https://github.com/apache/nifi/pull/3069 NIFI-4806: Bumping to tika 1.19.1 NIFI-4806: - Bumping to tika 1.19.1. You can merge this pull request into a Git repository by running: $ git pull https://github.com/mcgilman/nifi NIFI-4806 Alternatively you can review and apply these changes as the patch at: https://github.com/apache/nifi/pull/3069.patch To close this pull request, make a commit to your master/trunk branch with (at least) the following in the commit message: This closes #3069 ---- commit bba58ee1cdfc7bcd36484e6849401af08cd6f23e Author: Matt Gilman <matt.c.gilman@...> Date: 2018-10-12T18:30:34Z NIFI-4806: - Bumping to tika 1.19.1. ---- > Upgrade to Tika/Tika-Parsers 1.19 to resolve TIKA-2535 and CVEs reported > against all releases prior to 1.19 > ----------------------------------------------------------------------------------------------------------- > > Key: NIFI-4806 > URL: https://issues.apache.org/jira/browse/NIFI-4806 > Project: Apache NiFi > Issue Type: Improvement > Components: Extensions > Affects Versions: 1.5.0 > Reporter: Joseph Witt > Assignee: Matt Gilman > Priority: Blocker > Fix For: 1.8.0 > > > The nifi-media-processors depend on Tika-Parsers 1.16 as of now. They need > to be upgraded to at least Tika-Parsers 1.18 to resolve the licensing problem > identified to the Tika team and which they resolved in > https://issues.apache.org/jira/browse/TIKA-2535 > > We aren't susceptible to the licensing problem at this time because when we > did the last update for Tika-Parsers this was flagged and excluded though we > could be exposing bugs for certain datayptes we'd do mime detection on > (maybe). I have a comment about this in our pom. > > This Jira is to upgrade, ensure no invalid libs are used, and clean up the > comments and move on. -- This message was sent by Atlassian JIRA (v7.6.3#76005)