See <https://ci-builds.apache.org/job/PDFBox/job/PDFBox-trunk/2618/display/redirect?page=changes>
Changes: [Tilman Hausherr] PDFBOX-6026: remove windows line changes, fix digest conversion ------------------------------------------ [...truncated 516.76 KiB...] 27.06.2025 17:05:16 INFO visible.PDVisibleSigBuilder:325 - Created image form 27.06.2025 17:05:16 INFO visible.PDVisibleSigBuilder:338 - Created background layer form 27.06.2025 17:05:16 INFO visible.PDVisibleSigBuilder:351 - Inserted ProcSet to PDF 27.06.2025 17:05:16 INFO visible.PDVisibleSigBuilder:373 - Injected appearance stream to pdf 27.06.2025 17:05:16 INFO visible.PDVisibleSigBuilder:386 - Visible signature has been created 27.06.2025 17:05:16 INFO visible.PDVisibleSigBuilder:398 - WidgetDictionary has been created 27.06.2025 17:05:16 INFO visible.PDFTemplateCreator:151 - stream returning started, size= 28489 27.06.2025 17:05:16 INFO validation.CertInformationCollector:292 - Get alternative issuer certificate from: http://www.pki.admin.ch/aia/RegularCA01.crt 27.06.2025 17:05:17 INFO signature.SigUtils:441 - 200 OK 27.06.2025 17:05:17 INFO validation.CertInformationCollector:292 - Get alternative issuer certificate from: http://www.pki.admin.ch/aia/RootCAII.crt 27.06.2025 17:05:17 INFO signature.SigUtils:441 - 200 OK 27.06.2025 17:05:17 INFO validation.CertInformationCollector:248 - Found issuer for Cert: CN=Swiss Government Regular CA 01, OU=Certification Authorities, OU=Services, O=Admin, C=CH CN=Swiss Government Root CA II, OU=Certification Authorities, OU=Services, O=The Federal Authorities of the Swiss Confederation, C=CH 27.06.2025 17:05:17 INFO validation.CertInformationCollector:248 - Found issuer for Cert: CN=EGBA-OFRF-UFRF, OU=CHE-377.639.368, O="Bundesamt fuer Justiz (BJ), Eidgenoessisches Amt fuer Grundbuch- und Bodenrecht (EGBA)", L=Bern (BE), C=CH CN=Swiss Government Regular CA 01, OU=Certification Authorities, OU=Services, O=Admin, C=CH 27.06.2025 17:05:17 INFO validation.CertInformationCollector:248 - Found issuer for Cert: CN=Swiss Government Regular CA 01, OU=Certification Authorities, OU=Services, O=Admin, C=CH CN=Swiss Government Root CA II, OU=Certification Authorities, OU=Services, O=The Federal Authorities of the Swiss Confederation, C=CH 27.06.2025 17:05:17 INFO validation.CertInformationCollector:292 - Get alternative issuer certificate from: http://www.pki.admin.ch/aia/RegulatedCA02.crt 27.06.2025 17:05:17 INFO signature.SigUtils:441 - 200 OK 27.06.2025 17:05:17 INFO validation.CertInformationCollector:292 - Get alternative issuer certificate from: http://www.pki.admin.ch/aia/RootCAIV.crt 27.06.2025 17:05:17 INFO signature.SigUtils:441 - 200 OK 27.06.2025 17:05:17 INFO validation.CertInformationCollector:248 - Found issuer for Cert: CN=Swiss Government Regulated CA 02, OU=Swiss Government PKI, O=Bundesamt fuer Informatik und Telekommunikation (BIT), OID.2.5.4.97=VATCH-CHE-221.032.573, C=CH CN=Swiss Government Root CA IV, OU=Swiss Government PKI, O=Bundesamt fuer Informatik und Telekommunikation (BIT), C=CH 27.06.2025 17:05:17 INFO validation.CertInformationCollector:248 - Found issuer for Cert: CN=Swiss Government TSA, OU=Time Stamp Services, OU=Swiss Government PKI, O=Bundesamt fuer Informatik und Telekommunikation (BIT), OID.2.5.4.97=VATCH-CHE-221.032.573, L=Bern, C=CH CN=Swiss Government Regulated CA 02, OU=Swiss Government PKI, O=Bundesamt fuer Informatik und Telekommunikation (BIT), OID.2.5.4.97=VATCH-CHE-221.032.573, C=CH 27.06.2025 17:05:17 INFO validation.CertInformationCollector:248 - Found issuer for Cert: CN=Swiss Government Regulated CA 02, OU=Swiss Government PKI, O=Bundesamt fuer Informatik und Telekommunikation (BIT), OID.2.5.4.97=VATCH-CHE-221.032.573, C=CH CN=Swiss Government Root CA IV, OU=Swiss Government PKI, O=Bundesamt fuer Informatik und Telekommunikation (BIT), C=CH 27.06.2025 17:05:18 INFO cert.OcspHelper:439 - Nonce is good 27.06.2025 17:05:18 ERROR validation.AddValidationInformation:331 - Failed fetching OCSP at 'http://www.pki.admin.ch/aia/ocsp' for 'CN=EGBA-OFRF-UFRF, OU=CHE-377.639.368, O="Bundesamt fuer Justiz (BJ), Eidgenoessisches Amt fuer Grundbuch- und Bodenrecht (EGBA)", L=Bern (BE), C=CH' org.bouncycastle.cert.ocsp.OCSPException: OCSP: Status of Cert is unknown at org.apache.pdfbox.examples.signature.cert.OcspHelper.verifyOcspResponse(OcspHelper.java:248) at org.apache.pdfbox.examples.signature.cert.OcspHelper.getResponseOcsp(OcspHelper.java:139) at org.apache.pdfbox.examples.signature.validation.AddValidationInformation.addOcspData(AddValidationInformation.java:396) at org.apache.pdfbox.examples.signature.validation.AddValidationInformation.addOcspData(AddValidationInformation.java:382) at org.apache.pdfbox.examples.signature.validation.AddValidationInformation.fetchOcspData(AddValidationInformation.java:326) at org.apache.pdfbox.examples.signature.validation.AddValidationInformation.addRevocationDataRecursive(AddValidationInformation.java:284) at org.apache.pdfbox.examples.signature.validation.AddValidationInformation.updateVRI(AddValidationInformation.java:528) at org.apache.pdfbox.examples.signature.validation.AddValidationInformation.addRevocationData(AddValidationInformation.java:254) at org.apache.pdfbox.examples.signature.validation.AddValidationInformation.doValidation(AddValidationInformation.java:193) at org.apache.pdfbox.examples.signature.validation.AddValidationInformation.validateSignature(AddValidationInformation.java:134) at org.apache.pdfbox.examples.pdmodel.TestCreateSignature.testAddValidationInformation(TestCreateSignature.java:921) at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:77) at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.base/java.lang.reflect.Method.invoke(Method.java:569) at org.junit.platform.commons.util.ReflectionUtils.invokeMethod(ReflectionUtils.java:787) at org.junit.platform.commons.support.ReflectionSupport.invokeMethod(ReflectionSupport.java:479) at org.junit.jupiter.engine.execution.MethodInvocation.proceed(MethodInvocation.java:60) at org.junit.jupiter.engine.execution.InvocationInterceptorChain$ValidatingInvocation.proceed(InvocationInterceptorChain.java:131) at org.junit.jupiter.engine.extension.TimeoutExtension.intercept(TimeoutExtension.java:161) at org.junit.jupiter.engine.extension.TimeoutExtension.interceptTestableMethod(TimeoutExtension.java:152) at org.junit.jupiter.engine.extension.TimeoutExtension.interceptTestMethod(TimeoutExtension.java:91) at org.junit.jupiter.engine.execution.InterceptingExecutableInvoker$ReflectiveInterceptorCall.lambda$ofVoidMethod$0(InterceptingExecutableInvoker.java:112) at org.junit.jupiter.engine.execution.InterceptingExecutableInvoker.lambda$invoke$0(InterceptingExecutableInvoker.java:94) at org.junit.jupiter.engine.execution.InvocationInterceptorChain$InterceptedInvocation.proceed(InvocationInterceptorChain.java:106) at org.junit.jupiter.engine.execution.InvocationInterceptorChain.proceed(InvocationInterceptorChain.java:64) at org.junit.jupiter.engine.execution.InvocationInterceptorChain.chainAndInvoke(InvocationInterceptorChain.java:45) at org.junit.jupiter.engine.execution.InvocationInterceptorChain.invoke(InvocationInterceptorChain.java:37) at org.junit.jupiter.engine.execution.InterceptingExecutableInvoker.invoke(InterceptingExecutableInvoker.java:93) at org.junit.jupiter.engine.execution.InterceptingExecutableInvoker.invoke(InterceptingExecutableInvoker.java:87) at org.junit.jupiter.engine.descriptor.TestMethodTestDescriptor.lambda$invokeTestMethod$4(TestMethodTestDescriptor.java:221) at org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73) at org.junit.jupiter.engine.descriptor.TestMethodTestDescriptor.invokeTestMethod(TestMethodTestDescriptor.java:217) at org.junit.jupiter.engine.descriptor.TestMethodTestDescriptor.execute(TestMethodTestDescriptor.java:159) at org.junit.jupiter.engine.descriptor.TestMethodTestDescriptor.execute(TestMethodTestDescriptor.java:70) at org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:157) at org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73) at org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:147) at org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137) at org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:145) at org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73) at org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:144) at org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:101) at org.junit.platform.engine.support.hierarchical.ForkJoinPoolHierarchicalTestExecutorService$ExclusiveTask.exec(ForkJoinPoolHierarchicalTestExecutorService.java:274) at org.junit.platform.engine.support.hierarchical.ForkJoinPoolHierarchicalTestExecutorService$ExclusiveTask.execSync(ForkJoinPoolHierarchicalTestExecutorService.java:247) at org.junit.platform.engine.support.hierarchical.ForkJoinPoolHierarchicalTestExecutorService.executeSync(ForkJoinPoolHierarchicalTestExecutorService.java:194) at org.junit.platform.engine.support.hierarchical.ForkJoinPoolHierarchicalTestExecutorService.invokeAll(ForkJoinPoolHierarchicalTestExecutorService.java:166) at org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$6(NodeTestTask.java:161) at org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73) at org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$8(NodeTestTask.java:147) at org.junit.platform.engine.support.hierarchical.Node.around(Node.java:137) at org.junit.platform.engine.support.hierarchical.NodeTestTask.lambda$executeRecursively$9(NodeTestTask.java:145) at org.junit.platform.engine.support.hierarchical.ThrowableCollector.execute(ThrowableCollector.java:73) at org.junit.platform.engine.support.hierarchical.NodeTestTask.executeRecursively(NodeTestTask.java:144) at org.junit.platform.engine.support.hierarchical.NodeTestTask.execute(NodeTestTask.java:101) at org.junit.platform.engine.support.hierarchical.ForkJoinPoolHierarchicalTestExecutorService$ExclusiveTask.exec(ForkJoinPoolHierarchicalTestExecutorService.java:274) at java.base/java.util.concurrent.ForkJoinTask.doExec(ForkJoinTask.java:373) at java.base/java.util.concurrent.ForkJoinPool$WorkQueue.topLevelExec(ForkJoinPool.java:1182) at java.base/java.util.concurrent.ForkJoinPool.scan(ForkJoinPool.java:1655) at java.base/java.util.concurrent.ForkJoinPool.runWorker(ForkJoinPool.java:1622) at java.base/java.util.concurrent.ForkJoinWorkerThread.run(ForkJoinWorkerThread.java:165) 27.06.2025 17:05:18 INFO signature.SigUtils:441 - 200 OK 27.06.2025 17:05:18 INFO cert.CRLVerifier:231 - The certificate was not revoked by CRL http://www.pki.admin.ch/crl/RegularCA01.crl 27.06.2025 17:05:18 INFO validation.CertInformationCollector:248 - Found issuer for Cert: CN=Swiss Government Regular CA 01, OU=Certification Authorities, OU=Services, O=Admin, C=CH CN=Swiss Government Root CA II, OU=Certification Authorities, OU=Services, O=The Federal Authorities of the Swiss Confederation, C=CH 27.06.2025 17:05:18 INFO cert.OcspHelper:439 - Nonce is good 27.06.2025 17:05:18 INFO validation.CertInformationCollector:248 - Found issuer for Cert: CN=OCSP-Responder-RootCAII, OU=Swiss Government PKI, O=Bundesamt fuer Informatik und Telekommunikation (BIT), C=CH CN=Swiss Government Root CA II, OU=Certification Authorities, OU=Services, O=The Federal Authorities of the Swiss Confederation, C=CH 27.06.2025 17:05:19 INFO cert.OcspHelper:439 - Nonce is good 27.06.2025 17:05:19 INFO validation.CertInformationCollector:248 - Found issuer for Cert: CN=OCSP-Responder-RegulatedCA02, OU=Swiss Government PKI, O=Bundesamt fuer Informatik und Telekommunikation (BIT), C=CH CN=Swiss Government Regulated CA 02, OU=Swiss Government PKI, O=Bundesamt fuer Informatik und Telekommunikation (BIT), OID.2.5.4.97=VATCH-CHE-221.032.573, C=CH 27.06.2025 17:05:19 INFO validation.CertInformationCollector:248 - Found issuer for Cert: CN=Swiss Government Regulated CA 02, OU=Swiss Government PKI, O=Bundesamt fuer Informatik und Telekommunikation (BIT), OID.2.5.4.97=VATCH-CHE-221.032.573, C=CH CN=Swiss Government Root CA IV, OU=Swiss Government PKI, O=Bundesamt fuer Informatik und Telekommunikation (BIT), C=CH 27.06.2025 17:05:19 INFO cert.OcspHelper:439 - Nonce is good 27.06.2025 17:05:19 INFO validation.CertInformationCollector:248 - Found issuer for Cert: CN=OCSP-Responder-RootCAIV, OU=Swiss Government PKI, O=Bundesamt fuer Informatik und Telekommunikation (BIT), C=CH CN=Swiss Government Root CA IV, OU=Swiss Government PKI, O=Bundesamt fuer Informatik und Telekommunikation (BIT), C=CH hexSignatureHash: FDAF28ED27407334A7606598CD1156C9052FC7D4 hexCrlSignatureHash: 5B438C0B683144052F424FA890213D779522CCC2 ocspSignatureHash: 8CA30279C9BE10E0C496544BFB4ACF833C96989A ocspSignatureHash: 6293F5EF538B9867761B948CDB1A00637A9E5997 ocspSignatureHash: A28360421BBAB3D53BF5D0C62DF0965D628AE42C [INFO] Tests run: 19, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 28.98 s -- in org.apache.pdfbox.examples.pdmodel.TestCreateSignature [INFO] [INFO] Results: [INFO] [INFO] Tests run: 35, Failures: 0, Errors: 0, Skipped: 0 [INFO] [JENKINS] Recording test results [INFO] [INFO] --- jacoco:0.8.13:report (report) @ pdfbox-examples --- [INFO] Loading execution data file <https://ci-builds.apache.org/job/PDFBox/job/PDFBox-trunk/ws/examples/target/jacoco.exec> [INFO] Analyzed bundle 'Apache PDFBox examples' with 99 classes [INFO] [INFO] --- jar:3.4.2:jar (default-jar) @ pdfbox-examples --- [INFO] Building jar: <https://ci-builds.apache.org/job/PDFBox/job/PDFBox-trunk/ws/examples/target/pdfbox-examples-4.0.0-SNAPSHOT.jar> [INFO] [INFO] --- source:3.3.1:jar-no-fork (attach-sources) @ pdfbox-examples --- [INFO] Skipping source per configuration. [INFO] [INFO] --- apache-rat:0.16.1:check (default) @ pdfbox-examples --- [INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 0, approved: 114 licenses. [INFO] [INFO] --- dependency-check:12.1.3:check (default) @ pdfbox-examples --- [INFO] Checking for updates [INFO] Skipping the NVD API Update as it was completed within the last 240 minutes [INFO] Skipping Known Exploited Vulnerabilities update check since last check was within 24 hours. [INFO] Check for updates complete (284 ms) [INFO] Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user's risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report. About ODC: https://dependency-check.github.io/DependencyCheck/general/internals.html False Positives: https://dependency-check.github.io/DependencyCheck/general/suppression.html 💖 Sponsor: https://github.com/sponsors/jeremylong [INFO] Analysis Started [INFO] Finished Archive Analyzer (0 seconds) [INFO] Finished File Name Analyzer (0 seconds) [INFO] Finished Jar Analyzer (0 seconds) [INFO] Finished Dependency Merging Analyzer (0 seconds) [INFO] Finished Hint Analyzer (0 seconds) [INFO] Finished Version Filter Analyzer (0 seconds) [INFO] Created CPE Index (1 seconds) [INFO] Finished CPE Analyzer (1 seconds) [INFO] Finished False Positive Analyzer (0 seconds) [INFO] Finished NVD CVE Analyzer (0 seconds) [INFO] Finished Sonatype OSS Index Analyzer (0 seconds) [INFO] Finished Vulnerability Suppression Analyzer (0 seconds) [INFO] Finished Known Exploited Vulnerability Analyzer (0 seconds) [INFO] Finished Dependency Bundling Analyzer (0 seconds) [INFO] Finished Unused Suppression Rule Analyzer (0 seconds) [INFO] Analysis Complete (2 seconds) [INFO] Writing HTML report to: <https://ci-builds.apache.org/job/PDFBox/job/PDFBox-trunk/ws/examples/target/dependency-check-report.html> [INFO] [INFO] --- install:3.1.4:install (default-install) @ pdfbox-examples --- [INFO] Installing <https://ci-builds.apache.org/job/PDFBox/job/PDFBox-trunk/ws/examples/pom.xml> to /home/jenkins/.m2/repository/org/apache/pdfbox/pdfbox-examples/4.0.0-SNAPSHOT/pdfbox-examples-4.0.0-SNAPSHOT.pom [INFO] Installing <https://ci-builds.apache.org/job/PDFBox/job/PDFBox-trunk/ws/examples/target/pdfbox-examples-4.0.0-SNAPSHOT.jar> to /home/jenkins/.m2/repository/org/apache/pdfbox/pdfbox-examples/4.0.0-SNAPSHOT/pdfbox-examples-4.0.0-SNAPSHOT.jar [INFO] [INFO] --- deploy:3.1.4:deploy (default-deploy) @ pdfbox-examples --- [INFO] Downloading from apache.snapshots.https: https://repository.apache.org/content/repositories/snapshots/org/apache/pdfbox/pdfbox-examples/4.0.0-SNAPSHOT/maven-metadata.xml [INFO] Downloaded from apache.snapshots.https: https://repository.apache.org/content/repositories/snapshots/org/apache/pdfbox/pdfbox-examples/4.0.0-SNAPSHOT/maven-metadata.xml (788 B at 1.5 kB/s) [INFO] Uploading to apache.snapshots.https: https://repository.apache.org/content/repositories/snapshots/org/apache/pdfbox/pdfbox-examples/4.0.0-SNAPSHOT/pdfbox-examples-4.0.0-20250627.165753-766.pom [INFO] Uploaded to apache.snapshots.https: https://repository.apache.org/content/repositories/snapshots/org/apache/pdfbox/pdfbox-examples/4.0.0-SNAPSHOT/pdfbox-examples-4.0.0-20250627.165753-766.pom (6.9 kB at 6.5 kB/s) [INFO] Uploading to apache.snapshots.https: https://repository.apache.org/content/repositories/snapshots/org/apache/pdfbox/pdfbox-examples/4.0.0-SNAPSHOT/pdfbox-examples-4.0.0-20250627.165753-766.jar [INFO] Uploaded to apache.snapshots.https: https://repository.apache.org/content/repositories/snapshots/org/apache/pdfbox/pdfbox-examples/4.0.0-SNAPSHOT/pdfbox-examples-4.0.0-20250627.165753-766.jar (398 kB at 226 kB/s) [INFO] Downloading from apache.snapshots.https: https://repository.apache.org/content/repositories/snapshots/org/apache/pdfbox/pdfbox-examples/maven-metadata.xml [INFO] Downloaded from apache.snapshots.https: https://repository.apache.org/content/repositories/snapshots/org/apache/pdfbox/pdfbox-examples/maven-metadata.xml (474 B at 2.7 kB/s) [INFO] Uploading to apache.snapshots.https: https://repository.apache.org/content/repositories/snapshots/org/apache/pdfbox/pdfbox-examples/4.0.0-SNAPSHOT/maven-metadata.xml [INFO] Uploaded to apache.snapshots.https: https://repository.apache.org/content/repositories/snapshots/org/apache/pdfbox/pdfbox-examples/4.0.0-SNAPSHOT/maven-metadata.xml (788 B at 751 B/s) [INFO] Uploading to apache.snapshots.https: https://repository.apache.org/content/repositories/snapshots/org/apache/pdfbox/pdfbox-examples/maven-metadata.xml [INFO] Uploaded to apache.snapshots.https: https://repository.apache.org/content/repositories/snapshots/org/apache/pdfbox/pdfbox-examples/maven-metadata.xml (474 B at 425 B/s) [INFO] [INFO] --- ossindex:3.2.0:audit (default-cli) @ pdfbox-examples --- [INFO] Checking for vulnerabilities; 46 artifacts [INFO] Exclude coordinates: [] [INFO] Exclude vulnerability identifiers: [] [INFO] CVSS-score threshold: 0.0 [INFO] ------------------------------------------------------------------------ [INFO] Reactor Summary for pdfbox-reactor 4.0.0-SNAPSHOT: [INFO] [INFO] Apache PDFBox parent ............................... SUCCESS [ 27.387 s] [INFO] Apache PDFBox io ................................... SUCCESS [01:00 min] [INFO] Apache FontBox ..................................... SUCCESS [ 44.726 s] [INFO] Apache XmpBox ...................................... SUCCESS [ 30.255 s] [INFO] Apache PDFBox ...................................... SUCCESS [01:41 min] [INFO] Apache PDFBox Debugger ............................. SUCCESS [ 26.508 s] [INFO] Apache PDFBox tools ................................ SUCCESS [ 33.052 s] [INFO] Apache PDFBox application .......................... SUCCESS [ 27.201 s] [INFO] Apache PDFBox Debugger application ................. SUCCESS [ 26.899 s] [INFO] Apache PDFBox examples ............................. FAILURE [ 55.548 s] [INFO] pdfbox-reactor ..................................... SKIPPED [INFO] ------------------------------------------------------------------------ [INFO] BUILD FAILURE [INFO] ------------------------------------------------------------------------ [INFO] Total time: 07:58 min [INFO] Finished at: 2025-06-27T17:05:51Z [INFO] ------------------------------------------------------------------------ Waiting for Jenkins to finish collecting data [ERROR] Failed to execute goal org.sonatype.ossindex.maven:ossindex-maven-plugin:3.2.0:audit (default-cli) on project pdfbox-examples: Detected 1 vulnerable components: [ERROR] com.fasterxml.jackson.core:jackson-core:jar:2.14.0:test; https://ossindex.sonatype.org/component/pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.0?utm_source=ossindex-client&utm_medium=integration&utm_content=1.8.1 [ERROR] * [CVE-2025-52999] CWE-121: Stack-based Buffer Overflow (8.7); https://ossindex.sonatype.org/vulnerability/CVE-2025-52999?component-type=maven&component-name=com.fasterxml.jackson.core%2Fjackson-core&utm_source=ossindex-client&utm_medium=integration&utm_content=1.8.1 [ERROR] -> [Help 1] [ERROR] [ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch. [ERROR] Re-run Maven using the -X switch to enable full debug logging. [ERROR] [ERROR] For more information about the errors and possible solutions, please read the following articles: [ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException [ERROR] [ERROR] After correcting the problems, you can resume the build with the command [ERROR] mvn <goals> -rf :pdfbox-examples [JENKINS] Archiving <https://ci-builds.apache.org/job/PDFBox/job/PDFBox-trunk/ws/xmpbox/pom.xml> to org.apache.pdfbox/xmpbox/4.0.0-SNAPSHOT/xmpbox-4.0.0-SNAPSHOT.pom [JENKINS] Archiving <https://ci-builds.apache.org/job/PDFBox/job/PDFBox-trunk/ws/xmpbox/target/xmpbox-4.0.0-SNAPSHOT.jar> to org.apache.pdfbox/xmpbox/4.0.0-SNAPSHOT/xmpbox-4.0.0-SNAPSHOT.jar [JENKINS] Archiving <https://ci-builds.apache.org/job/PDFBox/job/PDFBox-trunk/ws/tools/pom.xml> to org.apache.pdfbox/pdfbox-tools/4.0.0-SNAPSHOT/pdfbox-tools-4.0.0-SNAPSHOT.pom [JENKINS] Archiving <https://ci-builds.apache.org/job/PDFBox/job/PDFBox-trunk/ws/tools/target/pdfbox-tools-4.0.0-SNAPSHOT.jar> to org.apache.pdfbox/pdfbox-tools/4.0.0-SNAPSHOT/pdfbox-tools-4.0.0-SNAPSHOT.jar [JENKINS] Archiving <https://ci-builds.apache.org/job/PDFBox/job/PDFBox-trunk/ws/debugger/pom.xml> to org.apache.pdfbox/pdfbox-debugger/4.0.0-SNAPSHOT/pdfbox-debugger-4.0.0-SNAPSHOT.pom [JENKINS] Archiving <https://ci-builds.apache.org/job/PDFBox/job/PDFBox-trunk/ws/debugger/target/pdfbox-debugger-4.0.0-SNAPSHOT.jar> to org.apache.pdfbox/pdfbox-debugger/4.0.0-SNAPSHOT/pdfbox-debugger-4.0.0-SNAPSHOT.jar [JENKINS] Archiving <https://ci-builds.apache.org/job/PDFBox/job/PDFBox-trunk/ws/app/pom.xml> to org.apache.pdfbox/pdfbox-app/4.0.0-SNAPSHOT/pdfbox-app-4.0.0-SNAPSHOT.pom [JENKINS] Archiving <https://ci-builds.apache.org/job/PDFBox/job/PDFBox-trunk/ws/app/target/pdfbox-app-4.0.0-SNAPSHOT.jar> to org.apache.pdfbox/pdfbox-app/4.0.0-SNAPSHOT/pdfbox-app-4.0.0-SNAPSHOT.jar [JENKINS] Archiving <https://ci-builds.apache.org/job/PDFBox/job/PDFBox-trunk/ws/examples/pom.xml> to org.apache.pdfbox/pdfbox-examples/4.0.0-SNAPSHOT/pdfbox-examples-4.0.0-SNAPSHOT.pom [JENKINS] Archiving <https://ci-builds.apache.org/job/PDFBox/job/PDFBox-trunk/ws/examples/target/pdfbox-examples-4.0.0-SNAPSHOT.jar> to org.apache.pdfbox/pdfbox-examples/4.0.0-SNAPSHOT/pdfbox-examples-4.0.0-SNAPSHOT.jar [JENKINS] Archiving <https://ci-builds.apache.org/job/PDFBox/job/PDFBox-trunk/ws/pom.xml> to org.apache.pdfbox/pdfbox-reactor/4.0.0-SNAPSHOT/pdfbox-reactor-4.0.0-SNAPSHOT.pom [JENKINS] Archiving <https://ci-builds.apache.org/job/PDFBox/job/PDFBox-trunk/ws/parent/pom.xml> to org.apache.pdfbox/pdfbox-parent/4.0.0-SNAPSHOT/pdfbox-parent-4.0.0-SNAPSHOT.pom [JENKINS] Archiving <https://ci-builds.apache.org/job/PDFBox/job/PDFBox-trunk/ws/pdfbox/pom.xml> to org.apache.pdfbox/pdfbox/4.0.0-SNAPSHOT/pdfbox-4.0.0-SNAPSHOT.pom [JENKINS] Archiving <https://ci-builds.apache.org/job/PDFBox/job/PDFBox-trunk/ws/pdfbox/target/pdfbox-4.0.0-SNAPSHOT.jar> to org.apache.pdfbox/pdfbox/4.0.0-SNAPSHOT/pdfbox-4.0.0-SNAPSHOT.jar [JENKINS] Archiving <https://ci-builds.apache.org/job/PDFBox/job/PDFBox-trunk/ws/debugger-app/pom.xml> to org.apache.pdfbox/debugger-app/4.0.0-SNAPSHOT/debugger-app-4.0.0-SNAPSHOT.pom [JENKINS] Archiving <https://ci-builds.apache.org/job/PDFBox/job/PDFBox-trunk/ws/debugger-app/target/debugger-app-4.0.0-SNAPSHOT.jar> to org.apache.pdfbox/debugger-app/4.0.0-SNAPSHOT/debugger-app-4.0.0-SNAPSHOT.jar [JENKINS] Archiving <https://ci-builds.apache.org/job/PDFBox/job/PDFBox-trunk/ws/io/pom.xml> to org.apache.pdfbox/pdfbox-io/4.0.0-SNAPSHOT/pdfbox-io-4.0.0-SNAPSHOT.pom [JENKINS] Archiving <https://ci-builds.apache.org/job/PDFBox/job/PDFBox-trunk/ws/io/target/pdfbox-io-4.0.0-SNAPSHOT.jar> to org.apache.pdfbox/pdfbox-io/4.0.0-SNAPSHOT/pdfbox-io-4.0.0-SNAPSHOT.jar [JENKINS] Archiving <https://ci-builds.apache.org/job/PDFBox/job/PDFBox-trunk/ws/fontbox/pom.xml> to org.apache.pdfbox/fontbox/4.0.0-SNAPSHOT/fontbox-4.0.0-SNAPSHOT.pom [JENKINS] Archiving <https://ci-builds.apache.org/job/PDFBox/job/PDFBox-trunk/ws/fontbox/target/fontbox-4.0.0-SNAPSHOT.jar> to org.apache.pdfbox/fontbox/4.0.0-SNAPSHOT/fontbox-4.0.0-SNAPSHOT.jar Sending e-mails to: dev@pdfbox.apache.org Sending e-mails to: dev@pdfbox.apache.org No mail will be sent out, as 'PDFBox » PDFBox-trunk » pdfbox-reactor #2618' does not have a result yet. Please make sure you set a proper result in case of pipeline/build scripts. channel stopped Archiving artifacts --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@pdfbox.apache.org For additional commands, e-mail: dev-h...@pdfbox.apache.org
