Cancel RC2 and respin RC3? Deserialization vulnerability is a doozy.
From: Julian Reschke [mailto:notificati...@github.com] Sent: Thursday, April 19, 2018 6:35 AM To: apache/tika <t...@noreply.github.com> Cc: Tim Allison <talli...@apache.org>; State change <state_cha...@noreply.github.com> Subject: Re: [apache/tika] Fix for TIKA-2570 contributed by ewanmellor. (#219) @cygri<https://github.com/cygri> - you probably should open a separate ticket on Jira. — You are receiving this because you modified the open/close state. Reply to this email directly, view it on GitHub<https://github.com/apache/tika/pull/219#issuecomment-382688818>, or mute the thread<https://github.com/notifications/unsubscribe-auth/AGbWvhAG5WeGq9jWtvrzTzgvLxlps0KAks5tqGhdgaJpZM4SOQr6>.
