[
https://issues.apache.org/jira/browse/TIKA-3869?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Tim Allison resolved TIKA-3869.
-------------------------------
Fix Version/s: 2.5.1
Resolution: Fixed
> Update jackson-databind when available
> --------------------------------------
>
> Key: TIKA-3869
> URL: https://issues.apache.org/jira/browse/TIKA-3869
> Project: Tika
> Issue Type: Task
> Reporter: Tim Allison
> Priority: Minor
> Fix For: 2.5.1
>
>
> No sooner had the 2.5.0 release vote passed than another cve from
> jackson-databind landed in ossindex. For details:
> https://github.com/FasterXML/jackson-databind/issues/3590 and
> https://nvd.nist.gov/vuln/detail/CVE-2022-42003
> We should update jackson-databind when the next non-rc version is available.
> I'll add this to the "ossindex-ignore" list so we can get a clean build for
> now.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
