This is an automated email from the ASF dual-hosted git repository.

jleroux pushed a commit to branch release22.01
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git


The following commit(s) were added to refs/heads/release22.01 by this push:
     new 3cb2b48b6f Fixed: [SECURITY] Upgrade Tika to 1.28.5 (OFBIZ-12693)
3cb2b48b6f is described below

commit 3cb2b48b6f06e057e23876e1ff73cfb6c397179e
Author: Jacques Le Roux <jacques.le.r...@les7arts.com>
AuthorDate: Thu Sep 15 09:47:19 2022 +0200

    Fixed: [SECURITY] Upgrade Tika to 1.28.5 (OFBIZ-12693)
    
    It seems it will be our last Tika update made w/o special efforts.
    
    Conflicts handled by hand in build.gradle
---
 build.gradle | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/build.gradle b/build.gradle
index bfeb22e570..c06c65c8ef 100644
--- a/build.gradle
+++ b/build.gradle
@@ -227,8 +227,8 @@ dependencies {
     implementation 'org.apache.sshd:sshd-sftp:2.8.0'
     // Note: The Apache Tika PMC has set September 30, 2022 as the End Of Life 
for the Tika 1.x branch.
     //       The PMC will make security fixes for the 1.x branch until that 
date.
-    implementation 'org.apache.tika:tika-core:1.28.4' // version 2 needs more 
work, see OFBIZ-12572
-    implementation 'org.apache.tika:tika-parsers:1.28.4' //  2.1.0 does not 
work,
+    implementation 'org.apache.tika:tika-core:1.28.5'
+    implementation 'org.apache.tika:tika-parsers:1.28.5' //  2.4.1 does not 
work,
     implementation 'org.apache.tomcat:tomcat-catalina-ha:9.0.60' // Remember 
to change the version number (9 now) in javadoc block if needed.
     implementation 'org.apache.tomcat:tomcat-jasper:9.0.60'
     implementation 'org.apache.axis2:axis2-kernel:1.7.9' // Above: 
SOAPEventHandler.java:42: error: package org.apache.axiom.om.impl.builder does 
not exist

Reply via email to