This is an automated email from the ASF dual-hosted git repository.
tilman pushed a commit to branch branch_2x
in repository https://gitbox.apache.org/repos/asf/tika.git
The following commit(s) were added to refs/heads/branch_2x by this push:
new 2c16957dc TIKA-4239: exclude 9.4.56.v20240826 from check
2c16957dc is described below
commit 2c16957dc543b59fc243c2bcee75eddc580825a8
Author: Tilman Hausherr <[email protected]>
AuthorDate: Mon Oct 21 10:42:42 2024 +0200
TIKA-4239: exclude 9.4.56.v20240826 from check
---
tika-parent/pom.xml | 9 +++++++++
1 file changed, 9 insertions(+)
diff --git a/tika-parent/pom.xml b/tika-parent/pom.xml
index 7bf93c080..57018fc09 100644
--- a/tika-parent/pom.xml
+++ b/tika-parent/pom.xml
@@ -1142,6 +1142,15 @@
<artifactId>hdf5-platform</artifactId>
<version>1.14.3-1.5.10</version>
</coordinate>
+ <!-- https://github.com/jetty/jetty.project/pull/12012
+ "As stated in CVE-2024-6763, the use of Jetty server, or
Jetty client, does not make you vulnerable to that CVE.
+ The code for HttpURI is also quite different in those older,
no longer supported, versions of Jetty.
+ -->
+ <coordinate>
+ <groupId>org.eclipse.jetty</groupId>
+ <artifactId>jetty-http</artifactId>
+ <version>9.4.56.v20240826</version>
+ </coordinate>
</excludeCoordinates>
<fail>true</fail>
</configuration>
