Skip to content

Conversation

tballison
Copy link

@tballison tballison commented Sep 17, 2025

This bumps Tika to 3.2.3. I also tried to upgrade Tika's dependencies throughout the project so that there's better consistency.

The motivation for this upgrade is: https://nvd.nist.gov/vuln/detail/CVE-2025-54988

If this is overreach, I can revert the non-Tika modules.

For sqlite, I'm guessing that we'll also have to upgrade the version in sleuthkit so that this doesn't break:

${env.TSK_HOME}/bindings/java/lib/sqlite-jdbc-3.49.1.0.jar"

🚨 I wasn't able to build or test locally. Please carefully review and test before merging. 🚨

@tballison
Copy link
Author

Ping. Let me know what you think. Thank you!

@simsong
Copy link
Member

simsong commented Oct 2, 2025

Ping. Let me know what you think. Thank you!

Unfortunately, this changes too many things and we don't have orderly testing to figure out if it breaks anything.
We also have this error:

Starting PostgreSQL 9.6
Start-Service : Cannot find any service with service name 'postgresql-x64-9.6'.
At line:1 char:1
+ Start-Service 'postgresql-x64-9.6'
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : ObjectNotFound: (postgresql-x64-9.6:String) [Start-Service], ServiceCommandException
    + FullyQualifiedErrorId : NoServiceFoundForGivenName,Microsoft.PowerShell.Commands.StartServiceCommand
 
cd %

I'm going to request tha tyou resubmit this with appropriate tests so that we know that it still works properly once the upgrades are in place. It would also be nice to move to codecov so that we can understand what is tested and what is not and how the PR impacts testing.

@simsong simsong closed this Oct 2, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants