[TIKA-2878] Update dependencies for 1.22

• Type: Task
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Assignee: Unassigned
• Reporter: Tim Allison
• Created: 20/May/19 02:28
• Updated: 14/Aug/19 15:53

Description

And in the category of "stuff you can't make up"...while generating the javadocs for the 1.21 release:

We're now getting this in tika-parsers:

  c3p0:c3p0:jar:0.9.1.1:compile; https://ossindex.sonatype.org/component/pkg:maven/c3p0/c3p0@0.9.1.1
    * [CVE-2019-5427]  Resource Management Errors (7.5); https://ossindex.sonatype.org/vuln/d25f4c21-9e76-4fc2-9d73-3770aa3aec56

and in tika-server:

    * [CVE-2019-10247]  Information Exposure (5.3); https://ossindex.sonatype.org/vuln/47ad4d7e-b9c3-414f-9bfa-1dfaa92b0aba
    * [CVE-2019-10241]  Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") (6.1); https://ossindex.sonatype.org/vuln/970aece8-4a1d-4a9e-ab97-0982b13dac4d
  org.eclipse.jetty:jetty-server:jar:9.4.14.v20181114:compile; https://ossindex.sonatype.org/component/pkg:maven/org.eclipse.jetty/jetty-server@9.4.14.v20181114
    * [CVE-2019-10247]  Information Exposure (5.3); https://ossindex.sonatype.org/vuln/47ad4d7e-b9c3-414f-9bfa-1dfaa92b0aba
    * [CVE-2019-10241]  Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") (6.1); https://ossindex.sonatype.org/vuln/970aece8-4a1d-4a9e-ab97-0982b13dac4d

Issue Links

• is duplicated by: TIKA-2885 Vulnerabilities in tika
• is duplicated by: TIKA-2887 Build fails with CVE warnings
• is duplicated by: TIKA-2907 Blanket dependency upgrades for next release cycle (1.22)