This is an automated email from the ASF dual-hosted git repository.
jleroux pushed a commit to branch release22.01
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
The following commit(s) were added to refs/heads/release22.01 by this push:
new d3da89397e Fixed: [SECURITY] Upgrade Tika to 2.5.0 (OFBIZ-12699)
d3da89397e is described below
commit d3da89397e6fcae4914167693b0c8ce4391e52d7
Author: Jacques Le Roux <jacques.le.r...@les7arts.com>
AuthorDate: Thu Oct 6 12:55:51 2022 +0200
Fixed: [SECURITY] Upgrade Tika to 2.5.0 (OFBIZ-12699)
See https://lists.apache.org/thread/7wwqjyonq8nmsldfb6gdbksl0wxlh380
Also moves commons-csv to its alphabetical right place
---
build.gradle | 10 ++++------
1 file changed, 4 insertions(+), 6 deletions(-)
diff --git a/build.gradle b/build.gradle
index 17ed4b21ae..b1886a3375 100644
--- a/build.gradle
+++ b/build.gradle
@@ -212,6 +212,7 @@ dependencies {
implementation 'net.lingala.zip4j:zip4j:2.9.0'
implementation 'org.apache.ant:ant-junit:1.10.11'
implementation 'org.apache.commons:commons-collections4:4.4'
+ implementation 'org.apache.commons:commons-csv:1.9.0'
implementation 'org.apache.commons:commons-dbcp2:2.9.0'
implementation 'org.apache.commons:commons-imaging:1.0-alpha2' // Alpha
but OK, "Imaging was working and was used by a number of projects in production
even before reaching its initial release as an Apache Commons component."
implementation 'org.apache.commons:commons-text:1.9'
@@ -225,12 +226,9 @@ dependencies {
implementation 'org.apache.shiro:shiro-core:1.8.0'
implementation 'org.apache.sshd:sshd-core:2.8.0'
implementation 'org.apache.sshd:sshd-sftp:2.8.0'
- // Note: The Apache Tika PMC has set September 30, 2022 as the End Of Life
for the Tika 1.x branch.
- // The PMC will make security fixes for the 1.x branch until that
date.
- implementation 'org.apache.tika:tika-core:2.4.1'
- implementation 'org.apache.tika:tika-parsers:2.4.1'
- implementation 'org.apache.commons:commons-csv:1.9.0'
- implementation 'org.apache.tika:tika-parser-pdf-module:2.4.1'
+ implementation 'org.apache.tika:tika-core:2.5.0'
+ implementation 'org.apache.tika:tika-parsers:2.5.0'
+ implementation 'org.apache.tika:tika-parser-pdf-module:2.5.0'
implementation 'org.apache.cxf:cxf-rt-frontend-jaxrs:3.5.3'
implementation 'org.apache.tomcat:tomcat-catalina-ha:9.0.65' // Remember
to change the version number (9 now) in javadoc block if needed.
implementation 'org.apache.tomcat:tomcat-jasper:9.0.65'
