Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Backport 1.3] Bump Tika from 2.4.0 to 2.5.0 addressing CVE-2022-33879. #6031

Merged
merged 1 commit into from
Jan 26, 2023

Conversation

ryanbogan
Copy link
Member

Signed-off-by: Ryan Bogan rbogan@amazon.com

Description

Address CVE-2022-33879 and bump to latest Tika version.

Backport of #4791

Issues Resolved

N/A

Check List

  • New functionality includes testing.
    • All tests pass
  • New functionality has been documented.
    • New functionality has javadoc added
  • Commits are signed per the DCO using --signoff
  • Commit changes are listed out in CHANGELOG.md file (See: Changelog)

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

Signed-off-by: Ryan Bogan <rbogan@amazon.com>
@ryanbogan ryanbogan marked this pull request as ready for review January 26, 2023 19:13
@github-actions
Copy link
Contributor

Gradle Check (Jenkins) Run Completed with:

@codecov-commenter
Copy link

Codecov Report

Merging #6031 (ff0cd35) into 1.3 (b2623e7) will decrease coverage by 0.03%.
The diff coverage is n/a.

📣 This organization is not using Codecov’s GitHub App Integration. We recommend you install it so Codecov can continue to function properly for your repositories. Learn more

@@             Coverage Diff              @@
##                1.3    #6031      +/-   ##
============================================
- Coverage     77.93%   77.90%   -0.03%     
- Complexity    63481    63489       +8     
============================================
  Files          4454     4454              
  Lines        274944   274944              
  Branches      41166    41166              
============================================
- Hits         214270   214207      -63     
- Misses        43791    43857      +66     
+ Partials      16883    16880       -3     
Impacted Files Coverage Δ
...nsearch/indices/recovery/PeerRecoveryNotFound.java 0.00% <0.00%> (-100.00%) ⬇️
...nsearch/search/dfs/DfsPhaseExecutionException.java 0.00% <0.00%> (-66.67%) ⬇️
...nsearch/rest/action/cat/RestCatRecoveryAction.java 43.61% <0.00%> (-42.56%) ⬇️
...java/org/opensearch/script/ScriptContextStats.java 33.33% <0.00%> (-40.01%) ⬇️
...org/opensearch/indices/IndexCreationException.java 60.00% <0.00%> (-40.00%) ⬇️
...search/discovery/zen/PublishClusterStateStats.java 58.33% <0.00%> (-37.51%) ⬇️
...java/org/opensearch/threadpool/ThreadPoolInfo.java 56.25% <0.00%> (-37.50%) ⬇️
...search/discovery/zen/PendingClusterStateStats.java 56.00% <0.00%> (-36.00%) ⬇️
.../opensearch/index/stats/IndexingPressureStats.java 61.03% <0.00%> (-35.07%) ⬇️
...search/index/stats/ShardIndexingPressureStats.java 42.30% <0.00%> (-30.77%) ⬇️
... and 456 more

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

@ryanbogan ryanbogan merged commit 1faca06 into 1.3 Jan 26, 2023
@ryanbogan ryanbogan deleted the backport/backport-4791-to-1.3 branch January 26, 2023 19:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants