[
https://issues.apache.org/jira/browse/TIKA-2486?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16255506#comment-16255506
]
Tim Allison commented on TIKA-2486:
-----------------------------------
[~koga73], thank you for raising this. I'm not sure how 5.1.2 is getting
pulled in. I don't see it at all when I run {{dependency:tree}} on master; I'm
only seeing 5.1.3. Am I missing something?
> Upgrade metadata-extractor to 2.10.1
> ------------------------------------
>
> Key: TIKA-2486
> URL: https://issues.apache.org/jira/browse/TIKA-2486
> Project: Tika
> Issue Type: Task
> Components: metadata
> Reporter: Julian Reschke
> Priority: Blocker
> Fix For: 1.17
>
>
> ...because earlier versions reference xmpcore 5.1.2 which is affected by
> http://www.cvedetails.com/cve/CVE-2016-4216/
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
