From 03cebec586395bceed210b0105f1f89fe3cab4a6 Mon Sep 17 00:00:00 2001 From: Ankush Pathak Date: Mon, 29 Dec 2025 04:59:24 +0000 Subject: [PATCH] fix(apache-tika-3.2): Remediate GHSA-vc5p-v9hr-52mj by bumping log4j-core Bump log4j-core to 2.25.3 to remediate GHSA-vc5p-v9hr-52mj Signed-off-by: Ankush Pathak --- apache-tika-3.2.yaml | 2 +- apache-tika-3.2/pombump-deps.yaml | 3 +++ apache-tika-3.2/pombump-properties.yaml | 2 ++ 3 files changed, 6 insertions(+), 1 deletion(-) diff --git a/apache-tika-3.2.yaml b/apache-tika-3.2.yaml index 7f307b51411..7a89431afb9 100644 --- a/apache-tika-3.2.yaml +++ b/apache-tika-3.2.yaml @@ -1,7 +1,7 @@ package: name: apache-tika-3.2 version: "3.2.3" - epoch: 1 + epoch: 2 # GHSA-vc5p-v9hr-52mj description: The Apache Tika toolkit detects and extracts metadata and text from over a thousand different file types (such as PPT, XLS, and PDF). copyright: - license: Apache-2.0 diff --git a/apache-tika-3.2/pombump-deps.yaml b/apache-tika-3.2/pombump-deps.yaml index ccfca98f859..ff3b9e8e7ce 100644 --- a/apache-tika-3.2/pombump-deps.yaml +++ b/apache-tika-3.2/pombump-deps.yaml @@ -2,3 +2,6 @@ patches: - groupId: org.apache.commons artifactId: commons-lang3 version: 3.18.0 + - groupId: org.apache.logging.log4j + artifactId: log4j-core + version: 2.25.3 diff --git a/apache-tika-3.2/pombump-properties.yaml b/apache-tika-3.2/pombump-properties.yaml index 3d9a009e5d1..618d836c072 100644 --- a/apache-tika-3.2/pombump-properties.yaml +++ b/apache-tika-3.2/pombump-properties.yaml @@ -3,3 +3,5 @@ properties: value: "3.18.0" - property: cxf.version value: "4.0.7" + - property: log4j2.version + value: "2.25.3"