This is an automated email from the ASF dual-hosted git repository.

tallison pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tika.git


The following commit(s) were added to refs/heads/main by this push:
     new a4feeb0e8 ignore netty in ossindex for now
a4feeb0e8 is described below

commit a4feeb0e81e5043c6b11369b197d0504de27d58e
Author: tallison <[email protected]>
AuthorDate: Tue Feb 11 11:46:26 2025 -0500

    ignore netty in ossindex for now
---
 tika-parent/pom.xml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/tika-parent/pom.xml b/tika-parent/pom.xml
index 1b041e6db..1d4e1ab82 100644
--- a/tika-parent/pom.xml
+++ b/tika-parent/pom.xml
@@ -1192,6 +1192,12 @@
               <artifactId>h2</artifactId>
               <version>${h2.version}</version>
             </coordinate>
+            <!-- until CVE-2025-24970 is fixed -->
+            <coordinate>
+              <groupId>io.netty</groupId>
+              <artifactId>netty-handler</artifactId>
+              <version>4.1.117.Final</version>
+            </coordinate>
             <!-- provided dependency brought in by 
org.deeplearning4j:deeplearning4j-utility-iterators -->
             <coordinate>
               <groupId>org.threeten</groupId>

Reply via email to