[ofbiz-framework] branch release22.01 updated: Fixed: [SECURITY] Upgrade Tika to 1.28.4 (OFBIZ-12657)

[jl...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

jleroux pushed a commit to branch release22.01
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git


The following commit(s) were added to refs/heads/release22.01 by this push:
     new 803a8cadc1 Fixed: [SECURITY] Upgrade Tika to 1.28.4 (OFBIZ-12657)
803a8cadc1 is described below

commit 803a8cadc120839bd1acb55a635d5ba9fc9d7230
Author: Jacques Le Roux <ja...@les7arts.com>
AuthorDate: Wed Jun 22 13:52:33 2022 +0200

    Fixed: [SECURITY] Upgrade Tika to 1.28.4 (OFBIZ-12657)
    
    Mentionned at https://tika.apache.org/
    Apache Tika 1.28.4 has been released! This release includes security related
    fixes and dependency upgrades
    Note: The Apache Tika PMC has set September 30, 2022 as the End Of Life for the
    Tika 1.x branch.
---
 build.gradle | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/build.gradle b/build.gradle
index f78b263fb2..6f2d644c43 100644
--- a/build.gradle
+++ b/build.gradle
@@ -225,8 +225,10 @@ dependencies {
     implementation 'org.apache.shiro:shiro-core:1.8.0'
     implementation 'org.apache.sshd:sshd-core:2.8.0'
     implementation 'org.apache.sshd:sshd-sftp:2.8.0'
-    implementation 'org.apache.tika:tika-core:1.28.3' // version 2 needs more work, see OFBIZ-12572
-    implementation 'org.apache.tika:tika-parsers:1.28.1' //  2.1.0 does not work
+    // Note: The Apache Tika PMC has set September 30, 2022 as the End Of Life for the Tika 1.x branch.
+    //       The PMC will make security fixes for the 1.x branch until that date.
+    implementation 'org.apache.tika:tika-core:1.28.4' // version 2 needs more work, see OFBIZ-12572
+    implementation 'org.apache.tika:tika-parsers:1.28.4' //  2.1.0 does not work,
     implementation 'org.apache.tomcat:tomcat-catalina-ha:9.0.60' // Remember to change the version number (9 now) in javadoc block if needed.
     implementation 'org.apache.tomcat:tomcat-jasper:9.0.60'
     implementation 'org.apache.axis2:axis2-kernel:1.7.9' // Above: SOAPEventHandler.java:42: error: package org.apache.axiom.om.impl.builder does not exist