This is an automated email from the ASF dual-hosted git repository. tallison pushed a commit to branch branch_3x in repository https://gitbox.apache.org/repos/asf/tika.git
commit 6a3b7728c81ab590d649d36a7847db0ac293db71 Author: tallison <[email protected]> AuthorDate: Tue Feb 11 11:46:26 2025 -0500 ignore netty in ossindex for now (cherry picked from commit a4feeb0e81e5043c6b11369b197d0504de27d58e) --- tika-parent/pom.xml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/tika-parent/pom.xml b/tika-parent/pom.xml index 73d3bb6df..26d68d46b 100644 --- a/tika-parent/pom.xml +++ b/tika-parent/pom.xml @@ -1188,6 +1188,12 @@ <artifactId>uimaj-core</artifactId> <version>3.4.1</version> </coordinate> + <!-- until CVE-2025-24970 is fixed --> + <coordinate> + <groupId>io.netty</groupId> + <artifactId>netty-handler</artifactId> + <version>4.1.117.Final</version> + </coordinate> <!-- provided dependency brought in by org.deeplearning4j:deeplearning4j-utility-iterators --> <coordinate> <groupId>org.threeten</groupId>
