[
https://issues.apache.org/jira/browse/OFBIZ-13155?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18015915#comment-18015915
]
Jacques Le Roux commented on OFBIZ-13155:
-----------------------------------------
I had a look and here is what I got.
<<barcode4J has dependencies to the avalon framework.>>
https://issues.apache.org/jira/browse/FOP-2905?page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel&focusedCommentId=17034801
[https://pdfbox.apache.org/3.0/migration.html]
<< FOP still uses older versions of PDFBox, which causes dependency collisions
with PDFBox 3.x.>>
https://issues.apache.org/jira/browse/FOP-3203?page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel&focusedCommentId=17882750#comment-17882750
With the help above I was finally able to make it compile. Then there is still
this above mentioned issue with testSendOrderConfirmation.
BTW, I noticed that there is already currently a weird quirk with
testSendOrderConfirmation but at least it works
{noformat}
2025-08-21 19:27:10,132 |main |TestRunContainer
|I| [JUNIT] : testSendOrderConfirmation starting...
[...]
2025-08-21 19:27:13,048 |main |HtmlWidget
|E| Error rendering included template at location
[component://order/template/order/orderReportContactMechs.fo.ftl]:
freemarker.template.TemplateNotFoundException: Template not found for name
"component://order/template/order/orderReportContactMechs.fo.ftl".
The name was interpreted by this TemplateLoader: MultiTemplateLoader(loader1 =
org.apache.ofbiz.base.util.template.FreeMarkerWorker$FlexibleTemplateLoader@52b8a639,
loader2 = StringTemplateLoader(Map { })).
freemarker.template.TemplateNotFoundException: Template not found for name
"component://order/template/order/orderReportContactMechs.fo.ftl".
The name was interpreted by this TemplateLoader: MultiTemplateLoader(loader1 =
org.apache.ofbiz.base.util.template.FreeMarkerWorker$FlexibleTemplateLoader@52b8a639,
loader2 = StringTemplateLoader(Map { })).
at
freemarker.template.Configuration.getTemplate(Configuration.java:3029)
~[freemarker-2.3.34.jar:2.3.34]
[...]
at
org.codehaus.groovy.vmplugin.v8.IndyInterface.fromCache(IndyInterface.java:336)
[groovy-5.0.0-alpha-11.jar:5.0.0.alpha-11]
at
org.apache.ofbiz.ecommerce.order.test.OrderNotificationTests.testSendOrderConfirmation(OrderNotificationTests.groovy:36)
[main/:?]
[...]
2025-08-21 19:27:18,598 |main |ServiceDispatcher
|T| Sync service [test-dispatcher-LlK9LfmI0p/sendOrderConfirmation] finished in
[8441] milliseconds
2025-08-21 19:27:18,600 |main |TestRunContainer
|I| [JUNIT] : testSendOrderConfirmation finished.
{noformat}
So the options are
# fix critical [https://www.cve.org/CVERecord?id=CVE-2025-54988] with
commented out testSendOrderConfirmation
# fix critical [https://www.cve.org/CVERecord?id=CVE-2025-54988] and fix
testSendOrderConfirmation (seems not that easy)
# don't fix [https://www.cve.org/CVERecord?id=CVE-2025-54988] and let it be
BTW, of course I tried to fix testSendOrderConfirmation. If you try, I think
don't bother about OrderReportContactMechs.fo.ftl. IMO, it's not the source of
the problem. I tried to fix it (OrderReportContactMechs.fo.ftl) but did not
find a solution.
> Update to Apache Tika 3.0.0
> ---------------------------
>
> Key: OFBIZ-13155
> URL: https://issues.apache.org/jira/browse/OFBIZ-13155
> Project: OFBiz
> Issue Type: Improvement
> Components: content, framework/security, framework/widget
> Affects Versions: Upcoming Branch
> Reporter: Jacques Le Roux
> Assignee: Jacques Le Roux
> Priority: Major
> Fix For: Upcoming Branch
>
>
> Follows [https://lists.apache.org/thread/wz7ds83q39t74n5lloy87m504m9r7gs9]
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
