[
https://issues.apache.org/jira/browse/TIKA-3869?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17627293#comment-17627293
]
Tim Allison commented on TIKA-3869:
-----------------------------------
Oops. Update is available now. Once I get a clean local build, I'll push.
> Update jackson-databind when available
> --------------------------------------
>
> Key: TIKA-3869
> URL: https://issues.apache.org/jira/browse/TIKA-3869
> Project: Tika
> Issue Type: Task
> Reporter: Tim Allison
> Priority: Minor
>
> No sooner had the 2.5.0 release vote passed than another cve from
> jackson-databind landed in ossindex. For details:
> https://github.com/FasterXML/jackson-databind/issues/3590 and
> https://nvd.nist.gov/vuln/detail/CVE-2022-42003
> We should update jackson-databind when the next non-rc version is available.
> I'll add this to the "ossindex-ignore" list so we can get a clean build for
> now.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
