Update dependencies for ingest-attachment plugin. (#666)

This PR resolves the CVEs for dependencies in the ingest-attachment plugin.

tika : '1.24' -> '1.24.1' (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9489)
pdfbox : '2.0.19' -> '2.0.23' (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-27807)
commons-io:commons-io : '2.6' -> '2.7' (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29425)

Signed-off-by: Rabi Panda <adnapibar@gmail.com>
This commit is contained in:
Rabi Panda 2021-05-11 10:40:33 -07:00 committed by GitHub
parent 58f9aaccb0
commit 0e180f4703
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
11 changed files with 8 additions and 8 deletions

View File

@ -38,8 +38,8 @@ opensearchplugin {
}
versions << [
'tika' : '1.24',
'pdfbox': '2.0.19',
'tika' : '1.24.1',
'pdfbox': '2.0.23',
'poi' : '4.1.2',
'mime4j': '0.8.3'
]
@ -50,7 +50,7 @@ dependencies {
// build against Jackson 2.9.5, but still works on our current version
api "org.apache.tika:tika-parsers:${versions.tika}"
api 'org.tukaani:xz:1.8'
api 'commons-io:commons-io:2.6'
api 'commons-io:commons-io:2.7'
api "org.slf4j:slf4j-api:${versions.slf4j}"
// character set detection

View File

@ -1 +0,0 @@
815893df5f31da2ece4040fe0a12fd44b577afaf

View File

@ -0,0 +1 @@
3f2bd4ba11c4162733c13cc90ca7c7ea09967102

View File

@ -1 +0,0 @@
b8b3873aacde51f1a3f4a052b236de828867d000

View File

@ -0,0 +1 @@
1a6b960dd2c1b1f8a5f5d6668b2930b50ff4324d

View File

@ -1 +0,0 @@
8dfcfc278b4b66e1a8b0e9e681b84ffe48da2c21

View File

@ -0,0 +1 @@
b89643d162c4e30b4fe39cfa265546cc506d4d18

View File

@ -0,0 +1 @@
703e65fb300d1425d4ad7b68c21c7795bb7a95c3

View File

@ -1 +0,0 @@
ed2e85f034743ea8e7ff25ab594caf361c408a44

View File

@ -0,0 +1 @@
02ce8d709cef4ed6a1a51ff14ba15b2ba2e76f09

View File

@ -1 +0,0 @@
282c0ecd31cb235f7d96bef18b8cdcb56573a195