TIKA-4326: add/update logback because of CVE

apache · Dec 21, 2024 · 132f394 · 132f394
1 parent 6668008
commit 132f394
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/tika-parent/pom.xml b/tika-parent/pom.xml
@@ -454,6 +454,7 @@
     <zookeeper.version>3.8.4</zookeeper.version>
     <zstd.version>1.5.6-8</zstd.version>
     <nimbus-jose-jwt.version>9.48</nimbus-jose-jwt.version>
+    <logback.version>1.5.13</logback.version>
     <javacpp.version>1.5.11</javacpp.version>
     <maven.site.version>3.8.0</maven.site.version>
     <maven.exec.version>3.5.0</maven.exec.version>
@@ -1006,6 +1007,17 @@
         <artifactId>maven-plugin-annotations</artifactId>
         <version>${maven.plugin.annotations.version}</version>
       </dependency>
+      <!-- for zookeeper to avoid security fail -->
+      <dependency>
+          <groupId>ch.qos.logback</groupId>
+          <artifactId>logback-core</artifactId>
+          <version>${logback.version}</version>
+      </dependency>
+      <dependency>
+          <groupId>ch.qos.logback</groupId>
+          <artifactId>logback-classic</artifactId>
+          <version>${logback.version}</version>
+      </dependency>
       <dependency>
           <groupId>org.bytedeco</groupId>
           <artifactId>hdf5</artifactId>