[tika] branch master updated: TIKA-2504 exclude dependency on old vfs2 to remove vulnerability from plexus-utils

[ta...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

tallison pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/tika.git


The following commit(s) were added to refs/heads/master by this push:
     new 7d83b86  TIKA-2504 exclude dependency on old vfs2 to remove vulnerability from plexus-utils
7d83b86 is described below

commit 7d83b86c9d3e7a749c0dd2adb52325c35fb99c51
Author: tballison <ta...@mitre.org>
AuthorDate: Tue Nov 14 11:26:27 2017 -0500

    TIKA-2504 exclude dependency on old vfs2 to remove vulnerability from plexus-utils
---
 tika-parsers/pom.xml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/tika-parsers/pom.xml b/tika-parsers/pom.xml
index a155e1f..1b5a4ee 100644
--- a/tika-parsers/pom.xml
+++ b/tika-parsers/pom.xml
@@ -284,6 +284,11 @@
           <groupId>commons-logging</groupId>
           <artifactId>commons-logging-api</artifactId>
         </exclusion>
+        <!-- TIKA-2504 exclude to avoid vulnerability in plexus-utils -->
+        <exclusion>
+          <groupId>org.apache.commons</groupId>
+          <artifactId>commons-vfs2</artifactId>
+        </exclusion>
       </exclusions>
     </dependency>
     <dependency>

-- 
To stop receiving notification emails like this one, please contact
['"commits@tika.apache.org" <co...@tika.apache.org>'].