https://bugzilla.redhat.com/show_bug.cgi?id=1632462
Tomas Hoger <thoger(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC|java-maint(a)redhat.com |
Whiteboard|impact=moderate,public=2018 |impact=moderate,public=2018
|0919,reported=20180919,sour |0919,reported=20180919,sour
|ce=cve,cvss3=7.5/CVSS:3.0/A |ce=cve,cvss3=7.5/CVSS:3.0/A
|V:N/AC:L/PR:N/UI:N/S:U/C:N/ |V:N/AC:L/PR:N/UI:N/S:U/C:N/
|I:N/A:H,cwe=CWE-776,rhel-8/ |I:N/A:H,cwe=CWE-776,fedora-
|tika=affected,fedora-all/ti |all/tika=affected,rhscl-3/r
|ka=affected,rhscl-3/rh-ecli |h-eclipse46-tika=affected,f
|pse46-tika=new,fis-2/tika-c |is-2/tika-core=new,fuse-7/c
|ore=new,fuse-7/camel-tika=n |amel-tika=new,fsw-6/tika-co
|ew,fsw-6/tika-core=new,brms |re=new,brms-5/tika-core=new
|-5/tika-core=new,brms-6/tik |,brms-6/tika-core=new,bpms-
|a-core=new,bpms-6/tika-core |6/tika-core=new,jdv-6/tika-
|=new,jdv-6/tika-core=new,rh |core=new,rhn_satellite_5/ti
|n_satellite_5/tika=new |ka=new
--- Comment #2 from Tomas Hoger <thoger(a)redhat.com> ---
Upstream commit:
https://github.com/apache/tika/commit/bd9d75d8b0a85af2937047bfad04288c304...
Note that this commit would only apply cleanly to version 1.17 and later, which
added XMLReaderUtils as part of the refactoring of XML parsers:
https://github.com/apache/tika/commit/c0c2eafe46224e5c316f2dede395308930a...
A fix for older versions would likely have to set entityExpansionLimit in all
places XML parsers are created.
--
You are receiving this mail because:
You are on the CC list for the bug.