You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@tika.apache.org by ta...@apache.org on 2017/11/13 18:23:13 UTC

[tika] branch master updated: TIKA-2503. Need to confirm this doesn't break anything

This is an automated email from the ASF dual-hosted git repository.

tallison pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/tika.git


The following commit(s) were added to refs/heads/master by this push:
     new f0b6a17  TIKA-2503.  Need to confirm this doesn't break anything
f0b6a17 is described below

commit f0b6a17e5ae8b47a5b19c068e853d156775754de
Author: tballison <ta...@mitre.org>
AuthorDate: Mon Nov 13 13:23:04 2017 -0500

    TIKA-2503.  Need to confirm this doesn't break anything
---
 tika-parsers/pom.xml | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)

diff --git a/tika-parsers/pom.xml b/tika-parsers/pom.xml
index 45d34a5..e8899c3 100644
--- a/tika-parsers/pom.xml
+++ b/tika-parsers/pom.xml
@@ -422,8 +422,35 @@
           <groupId>commons-logging</groupId>
           <artifactId>commons-logging</artifactId>
         </exclusion>
+        <!-- exclude because of vulnerability TIKA-2499 -->
+        <exclusion>
+          <groupId>org.apache.httpcomponents</groupId>
+          <artifactId>httpclient</artifactId>
+        </exclusion>
+        <exclusion>
+          <groupId>org.apache.httpcomponents</groupId>
+          <artifactId>httpmime</artifactId>
+        </exclusion>
       </exclusions>
     </dependency>
+    <!-- add back in for edu.ucar for httpservices -->
+    <dependency>
+      <groupId>org.apache.httpcomponents</groupId>
+      <artifactId>httpclient</artifactId>
+      <version>4.5.3</version>
+      <exclusions>
+        <exclusion>
+          <groupId>commons-logging</groupId>
+          <artifactId>commons-logging</artifactId>
+        </exclusion>
+      </exclusions>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.httpcomponents</groupId>
+      <artifactId>httpmime</artifactId>
+      <version>4.5.3</version>
+    </dependency>
+
     <!-- Apache Commons CSV -->
     <dependency>
       <groupId>org.apache.commons</groupId>

-- 
To stop receiving notification emails like this one, please contact
['"commits@tika.apache.org" <co...@tika.apache.org>'].