Cancel RC2 and respin RC3? Deserialization vulnerability is a doozy.
From: Julian Reschke [mailto:[email protected]] Sent: Thursday, April 19, 2018 6:35 AM To: apache/tika <[email protected]> Cc: Tim Allison <[email protected]>; State change <[email protected]> Subject: Re: [apache/tika] Fix for TIKA-2570 contributed by ewanmellor. (#219) @cygri<https://github.com/cygri> - you probably should open a separate ticket on Jira. — You are receiving this because you modified the open/close state. Reply to this email directly, view it on GitHub<https://github.com/apache/tika/pull/219#issuecomment-382688818>, or mute the thread<https://github.com/notifications/unsubscribe-auth/AGbWvhAG5WeGq9jWtvrzTzgvLxlps0KAks5tqGhdgaJpZM4SOQr6>.
