You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ofbiz.apache.org by jl...@apache.org on 2021/12/24 07:19:24 UTC
[ofbiz-framework] branch trunk updated: Fixed: [SECURITY] Update TIka because of Apache Log4j2 vulnerability (OFBIZ-12474)
This is an automated email from the ASF dual-hosted git repository.
jleroux pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
The following commit(s) were added to refs/heads/trunk by this push:
new 565e471 Fixed: [SECURITY] Update TIka because of Apache Log4j2 vulnerability (OFBIZ-12474)
565e471 is described below
commit 565e4716ac3f8718650828e3a0c21d98f8bbd7fb
Author: Jacques Le Roux <ja...@les7arts.com>
AuthorDate: Fri Dec 24 08:13:54 2021 +0100
Fixed: [SECURITY] Update TIka because of Apache Log4j2 vulnerability (OFBIZ-12474)
Apache Tika 1.28 contains a migration to log4j2 (2.17.0) from log4j
as well as several other dependency upgrades. Details can be found in
the changes file:
https://www.apache.org/dist/tika/1.28/CHANGES-1.28.txt
---
build.gradle | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/build.gradle b/build.gradle
index 160464a..99206c3 100644
--- a/build.gradle
+++ b/build.gradle
@@ -223,8 +223,8 @@ dependencies {
implementation 'org.apache.pdfbox:pdfbox:2.0.24'
implementation 'org.apache.shiro:shiro-core:1.8.0'
implementation 'org.apache.sshd:sshd-core:1.7.0' // So far we did not update from 1.7.0 because of a compile issue. You may try w/ a newer version than 2.4.0
- implementation 'org.apache.tika:tika-core:1.26' // 2.1.0 does not work
- implementation 'org.apache.tika:tika-parsers:1.25' // 2.1.0 does not work
+ implementation 'org.apache.tika:tika-core:1.28' // 2.1.0 does not work
+ implementation 'org.apache.tika:tika-parsers:1.28' // 2.1.0 does not work
implementation 'org.apache.tomcat:tomcat-catalina-ha:9.0.54' // Remember to change the version number (9 now) in javadoc block if needed.
implementation 'org.apache.tomcat:tomcat-jasper:9.0.54'
implementation 'org.apache.axis2:axis2-kernel:1.7.9' // Above: SOAPEventHandler.java:42: error: package org.apache.axiom.om.impl.builder does not exist