Y. You got CVE-2019-10088:
https://github.com/apache/tika/commit/426be73b9e7500fa3d441231fa4e473de34743f6
Two other commits you'll want are the following
CVE-2019-10093:
https://github.com/apache/tika/commit/81c21ab0aac6b3e4102a1a8906c8c7eab6f96dae
CVE-2019-10094:
https://github.com/apache/tika/
IIUC, ASF policy is not to update the commit message in git. See #16:
https://www.apache.org/security/committers.html
On Tue, Aug 13, 2019 at 1:58 AM Hugo Lefeuvre wrote:
>
> Hi Tim,
>
> > Y. You got CVE-2019-10088:
> > https://github.com/apache/tika/commit/426be73b9e7500fa3d441231fa4e473de34743f
