[OFBIZ-12626] [SECURITY] Upgrade Tika to 1.28.3

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 18.12.06, 22.01.01
• Fix Version/s: 18.12.06, 22.01.01
• Component/s: content, framework/security
• Sprint: Bug Crush Event - 21/2/2015
• Assignee: Jacques Le Roux
• Reporter: Jacques Le Roux
• Created: 28/May/22 07:31
• Updated: 28/May/22 08:08
• Resolved: 28/May/22 08:08

Description

As mentionned in https://lists.apache.org/thread/9wkgbq5tsz6shy7m8b9269jofozhfkg1

Apache Tika 1.28.3 contains security-related fixes and dependency upgrades. Details can be found in the changes file: https://www.apache.org/dist/tika/1.28.3/CHANGES-1.28.3.txt

And also:

NOTE: The 1.x branch is now in security-fixes-only mode. The PMC has decided the formal EoL for the 1.x branch is 30 September 2022: https://lists.apache.org/thread/yq6n7o01kw544dvj1jsoqk29g6yqjkp3

Please upgrade to 2.4.0 at your earliest convenience. For guidance on this upgrade: https://cwiki.apache.org/confluence/display/TIKA/Migrating+to+Tika+2.0.0

Issue Links

• is related to: OFBIZ-12572 [SECURITY] Upgrade Tika to 2.3.0 or more