You are viewing a plain text version of this content. The canonical link for it is here.
Posted to server-dev@james.apache.org by bt...@apache.org on 2018/10/19 09:22:42 UTC
[2/4] james-project git commit: JAMES-2561 Upgrade PDFBox to 2.0.12
JAMES-2561 Upgrade PDFBox to 2.0.12
CVE-2018-11797: In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree.
This dependency is used only in tests but we should perform the upgrade anyway.
Project: http://git-wip-us.apache.org/repos/asf/james-project/repo
Commit: http://git-wip-us.apache.org/repos/asf/james-project/commit/c3f5b265
Tree: http://git-wip-us.apache.org/repos/asf/james-project/tree/c3f5b265
Diff: http://git-wip-us.apache.org/repos/asf/james-project/diff/c3f5b265
Branch: refs/heads/master
Commit: c3f5b26532c9b01459c2cdc0a0037fdcb08944aa
Parents: a98ac8e
Author: Benoit Tellier <bt...@linagora.com>
Authored: Thu Oct 18 11:57:53 2018 +0700
Committer: Benoit Tellier <bt...@linagora.com>
Committed: Fri Oct 19 16:21:49 2018 +0700
----------------------------------------------------------------------
pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/james-project/blob/c3f5b265/pom.xml
----------------------------------------------------------------------
diff --git a/pom.xml b/pom.xml
index 80d1b71..436f54f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -2336,7 +2336,7 @@
<dependency>
<groupId>org.apache.pdfbox</groupId>
<artifactId>pdfbox</artifactId>
- <version>2.0.11</version>
+ <version>2.0.12</version>
<exclusions>
<exclusion>
<groupId>commons-logging</groupId>
---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org