[
https://issues.apache.org/jira/browse/TIKA-2486?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16255607#comment-16255607
]
AJ Savino commented on TIKA-2486:
---------------------------------
Seeing as this ticket is marked resolved it's probably already fixed in master.
But the latest tika release 1.16 references metadata-extractor 2.9.1 which has
xmpcore 5.1.2 as a dependency
> Upgrade metadata-extractor to 2.10.1
> ------------------------------------
>
> Key: TIKA-2486
> URL: https://issues.apache.org/jira/browse/TIKA-2486
> Project: Tika
> Issue Type: Task
> Components: metadata
> Reporter: Julian Reschke
> Priority: Blocker
> Fix For: 1.17
>
>
> ...because earlier versions reference xmpcore 5.1.2 which is affected by
> http://www.cvedetails.com/cve/CVE-2016-4216/
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
