I think I've answered my own question. Unless there are objections, I'll cancel the RC2 vote and roll RC3 tomorrow.
-----Original Message----- From: Allison, Timothy B. [mailto:talli...@mitre.org] Sent: Thursday, April 19, 2018 7:03 AM To: dev@tika.apache.org Subject: FW: [apache/tika] Fix for TIKA-2570 contributed by ewanmellor. (#219) Cancel RC2 and respin RC3? Deserialization vulnerability is a doozy. From: Julian Reschke [mailto:notificati...@github.com] Sent: Thursday, April 19, 2018 6:35 AM To: apache/tika <t...@noreply.github.com> Cc: Tim Allison <talli...@apache.org>; State change <state_cha...@noreply.github.com> Subject: Re: [apache/tika] Fix for TIKA-2570 contributed by ewanmellor. (#219) @cygri<https://github.com/cygri> - you probably should open a separate ticket on Jira. — You are receiving this because you modified the open/close state. Reply to this email directly, view it on GitHub<https://github.com/apache/tika/pull/219#issuecomment-382688818>, or mute the thread<https://github.com/notifications/unsubscribe-auth/AGbWvhAG5WeGq9jWtvrzTzgvLxlps0KAks5tqGhdgaJpZM4SOQr6>.