[
https://issues.apache.org/jira/browse/TIKA-3869?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17612427#comment-17612427
]
Hudson commented on TIKA-3869:
------------------------------
SUCCESS: Integrated in Jenkins build Tika ยป tika-main-jdk8 #827 (See
[https://ci-builds.apache.org/job/Tika/job/tika-main-jdk8/827/])
TIKA-3869 -- ignore ossindex on databind for now (tallison:
[https://github.com/apache/tika/commit/96df8d9897ca0525bd5fc89e32b0c9477ed73b03])
* (edit) tika-parent/pom.xml
> Update jackson-databind when available
> --------------------------------------
>
> Key: TIKA-3869
> URL: https://issues.apache.org/jira/browse/TIKA-3869
> Project: Tika
> Issue Type: Task
> Reporter: Tim Allison
> Priority: Minor
>
> No sooner had the 2.5.0 release vote passed than another cve from
> jackson-databind landed in ossindex. For details:
> https://github.com/FasterXML/jackson-databind/issues/3590 and
> https://nvd.nist.gov/vuln/detail/CVE-2022-42003
> We should update jackson-databind when the next non-rc version is available.
> I'll add this to the "ossindex-ignore" list so we can get a clean build for
> now.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
