You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ofbiz.apache.org by jl...@apache.org on 2022/02/12 10:48:28 UTC

[ofbiz-framework] branch release22.01 updated: Fixed: CLONE - [SECURITY] Upgrade Tika to 1.28.1 (OFBIZ-12573)

This is an automated email from the ASF dual-hosted git repository.

jleroux pushed a commit to branch release22.01
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git


The following commit(s) were added to refs/heads/release22.01 by this push:
     new b1eade9  Fixed: CLONE - [SECURITY] Upgrade Tika to 1.28.1 (OFBIZ-12573)
b1eade9 is described below

commit b1eade9270afe7e5a61ea935af236ededc242bc0
Author: Jacques Le Roux <ja...@les7arts.com>
AuthorDate: Sat Feb 12 10:37:10 2022 +0100

    Fixed: CLONE - [SECURITY] Upgrade Tika to 1.28.1 (OFBIZ-12573)
    
    Simpler for now, later OFBIZ 12573 needs to be done
    Also formatting improvement in DataResourceWorker.java: removes a blank lines
    
    Thanks: Tim Allison <ta...@apache.org> for the nice exchanges :)
---
 build.gradle | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/build.gradle b/build.gradle
index bf3f6ee..5cd3a71 100644
--- a/build.gradle
+++ b/build.gradle
@@ -115,7 +115,7 @@ node {
     // https://github.com/node-gradle/gradle-node-plugin/blob/2.2.4/README.md
     // Set the work directory where node_modules should be located
     nodeModulesDir = file("${project.projectDir}/themes/common-theme/webapp/common/js")
-    // If you set a "CI" env var then ci only will be used: 
+    // If you set a "CI" env var then ci only will be used:
     // https://github.com/node-gradle/gradle-node-plugin/blob/master/docs/faq.md#how-do-i-use-npm-ci-instead-of-npm-install
     npmInstallCommand = System.getenv("CI") ? 'ci' : 'install'
 }
@@ -223,8 +223,8 @@ dependencies {
     implementation 'org.apache.pdfbox:pdfbox:2.0.24'
     implementation 'org.apache.shiro:shiro-core:1.8.0'
     implementation 'org.apache.sshd:sshd-core:1.7.0' // So far we did not update from 1.7.0 because of a compile issue. You may try w/ a newer version than  2.4.0
-    implementation 'org.apache.tika:tika-core:1.28' //  2.1.0 does not work
-    implementation 'org.apache.tika:tika-parsers:1.28' //  2.1.0 does not work
+    implementation 'org.apache.tika:tika-core:1.28.1' //  2.1.0 does not work
+    implementation 'org.apache.tika:tika-parsers:1.28.1' //  2.1.0 does not work
     implementation 'org.apache.tomcat:tomcat-catalina-ha:9.0.58' // Remember to change the version number (9 now) in javadoc block if needed.
     implementation 'org.apache.tomcat:tomcat-jasper:9.0.58'
     implementation 'org.apache.axis2:axis2-kernel:1.7.9' // Above: SOAPEventHandler.java:42: error: package org.apache.axiom.om.impl.builder does not exist