Stay Secure with the Latest Linux Advisories

security advisoryfedoracritical

Fedora 29: FEDORA-2019-728394g6he Critical: Tika Update Enhancements

Update to newer release of Tika including security fixes for CVE-2016-4434 and CVE-2016-6809.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-639385f5ec 2018-04-27 23:05:32.367776 --------------------------------------------------------------------------------Name : tika Product : Fedora 28 Version : 1.17 Release : 1.fc28 URL : https://tika.apache.org/ Summary : A content analysis toolkit Description : The Apache Tika toolkit detects and extracts meta-data and structured text content from various documents using existing parser libraries. --------------------------------------------------------------------------------Update Information: Update to newer release of Tika including security fixes for CVE-2016-4434 and CVE-2016-6809. --------------------------------------------------------------------------------ChangeLog: * Thu Apr 19 2018 Mat Booth - 1.17-1 - Update to latest upstream release * Thu Apr 19 2018 Mat Booth - 1.12-6 - Drop uneeded dep on CXF --------------------------------------------------------------------------------References: [ 1 ] Bug #1394156 - CVE-2016-6809 tika: Native deserialization of Java objects in matlab files https://bugzilla.redhat.com/show_bug.cgi?id=1394156 [ 2 ] Bug #1340386 - CVE-2016-4434 tika: XML External Entity vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=1340386 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-639385f5ec' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Upgrade Tika in Fedora 28 to address security vulnerabilities, improving system defenses and performance.. Tika Update,Fedora Security Advisory,Java Content Analysis. . Severity: Critical. LinuxSecurity.com Team

Apr 27, 2018 •Critical Fedora