CVE-2022-33879: Apache Tika: Incomplete fix and new regex DoS in StandardsExtractingContentHandler

2022-06-28 Thread Tim Allison
Severity: low Description: The initial fixes in CVE-2022-30126 and CVE-2022-30973 for regexes in the StandardsExtractingContentHandler were insufficient, and we found a separate, new regex DoS in a different regex in the StandardsExtractingContentHandler. These are now fixed in 1.28.4 and 2.4.1

[ANNOUNCE] Apache Beam 2.40.0 Released

2022-06-28 Thread Pablo Estrada
The Apache Beam team is pleased to announce the release of version 2.40.0. Apache Beam is an open source unified programming model to define and execute data processing pipelines, including ETL, batch and stream (continuous) processing. See https://beam.apache.org You can download the release

[ANNOUNCE] Apache UIMA Ruta v3.2.0 released

2022-06-28 Thread Richard Eckart de Castilho
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 The Apache UIMA team is pleased to announce the release of Apache UIMA Ruta, version 3.2.0. Apache UIMA is a component architecture and framework for the analysis of unstructured content like text, video and audio data.