New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update to Apache Tika 1.19.1; security vulnerabilities in 1.12 #131

Closed
ruebot opened this Issue Nov 30, 2017 · 4 comments

Comments

2 participants
@ruebot
Member

ruebot commented Nov 30, 2017

See #126

We need to update DetectLanguage to handle the LanguangeDetect deprecation in Tika 1.13+

@ianmilligan1

This comment has been minimized.

Show comment
Hide comment
@ianmilligan1

ianmilligan1 Jan 6, 2018

Member

FWIW I'm keeping an eye on the docs... so far, the 1.17 code usage examples still point to the deprecated class.

Member

ianmilligan1 commented Jan 6, 2018

FWIW I'm keeping an eye on the docs... so far, the 1.17 code usage examples still point to the deprecated class.

@ruebot ruebot added the URA-Task label Feb 5, 2018

@ruebot ruebot added this to To Do in 1.0.0 Release of AUT Aug 13, 2018

@ruebot ruebot changed the title from Update to Apache Tika 1.13+ to Update to Apache Tika 1.19.1; security vulnerabilities in 1.12 Oct 17, 2018

@ruebot

This comment has been minimized.

Show comment
Hide comment
@ruebot

ruebot Oct 17, 2018

Member

1.19.1 is the version to use now. We got a bunch of security warnings today for the version we're using now.

Just changing the version to 1.19.1 allows for a clean build, but we get this deprecation warning. Which is nice. Previously, it wouldn't build with 1.13.

[WARNING] /home/nruest/git/aut/src/main/scala/io/archivesunleashed/matchbox/DetectLanguage.scala:33: warning: class LanguageIdentifier in package language is deprecated: see corresponding Javadoc for more information.
[INFO]       new LanguageIdentifier(input).getLanguage
[INFO]           ^
[WARNING] one warning found

@lintool @ianmilligan1 do y'all want me to put in a PR to resolve this right now, and create a separate issue for the cleaning up the deprecation warning? If @borislin has time, we could have him knock that one out quickly.

Member

ruebot commented Oct 17, 2018

1.19.1 is the version to use now. We got a bunch of security warnings today for the version we're using now.

Just changing the version to 1.19.1 allows for a clean build, but we get this deprecation warning. Which is nice. Previously, it wouldn't build with 1.13.

[WARNING] /home/nruest/git/aut/src/main/scala/io/archivesunleashed/matchbox/DetectLanguage.scala:33: warning: class LanguageIdentifier in package language is deprecated: see corresponding Javadoc for more information.
[INFO]       new LanguageIdentifier(input).getLanguage
[INFO]           ^
[WARNING] one warning found

@lintool @ianmilligan1 do y'all want me to put in a PR to resolve this right now, and create a separate issue for the cleaning up the deprecation warning? If @borislin has time, we could have him knock that one out quickly.

@ianmilligan1

This comment has been minimized.

Show comment
Hide comment
@ianmilligan1

ianmilligan1 Oct 17, 2018

Member

do y'all want me to put in a PR to resolve this right now, and create a separate issue for the cleaning up the deprecation warning?

That sounds good to me!

Member

ianmilligan1 commented Oct 17, 2018

do y'all want me to put in a PR to resolve this right now, and create a separate issue for the cleaning up the deprecation warning?

That sounds good to me!

ruebot added a commit that referenced this issue Oct 17, 2018

Update Apache Tika - security vulnerabilities; resolves #131.
- CVE-2018-1338
- CVE-2018-11762
- CVE-2018-11761
- CVE-2016-6809
- CVE-2018-1339
- CVE-2018-11796
- CVE-2016-4434
- CVE-2018-1335

1.0.0 Release of AUT automation moved this from To Do to Done Oct 17, 2018

@ruebot

This comment has been minimized.

Show comment
Hide comment
@ruebot

ruebot Oct 17, 2018

Member

#286 is the related ticket.

Member

ruebot commented Oct 17, 2018

#286 is the related ticket.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment