Debian/tika: critical 9.8
Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files. The issue exists because Tika invokes JMatIO to do native deserialization.
Action: Upgrade tika to 1.18-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.18-1 | - |
Fixed versions
| 1.18-1 |
Sources
published · modified · JSON