From 24582e4174a8297b50c4859988cd73f8ae000e6b Mon Sep 17 00:00:00 2001 From: Thomas Cooper Date: Mon, 4 Jul 2022 15:42:30 +0100 Subject: [PATCH 1/2] Update netty to 4.1.78 to address CVE-2022-24823 Signed-off-by: Thomas Cooper --- gradle/dependencies.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gradle/dependencies.gradle b/gradle/dependencies.gradle index baf553330497f..e8f8179db09fd 100644 --- a/gradle/dependencies.gradle +++ b/gradle/dependencies.gradle @@ -105,7 +105,7 @@ versions += [ mavenArtifact: "3.8.4", metrics: "2.2.0", mockito: "4.4.0", - netty: "4.1.73.Final", + netty: "4.1.78.Final", powermock: "2.0.9", reflections: "0.9.12", reload4j: "1.2.19", From c6a21d3ea6726ea1dd1bfa9a866fa166e0339146 Mon Sep 17 00:00:00 2001 From: Thomas Cooper Date: Mon, 4 Jul 2022 16:09:24 +0100 Subject: [PATCH 2/2] Update Jackson to 2.13.3 to address CVE-2020-36518 Signed-off-by: Thomas Cooper --- gradle/dependencies.gradle | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gradle/dependencies.gradle b/gradle/dependencies.gradle index e8f8179db09fd..92c098851c618 100644 --- a/gradle/dependencies.gradle +++ b/gradle/dependencies.gradle @@ -66,8 +66,8 @@ versions += [ grgit: "4.1.1", httpclient: "4.5.13", easymock: "4.3", - jackson: "2.12.6", - jacksonDatabind: "2.12.6.1", + jackson: "2.13.3", + jacksonDatabind: "2.13.3", jacoco: "0.8.7", javassist: "3.27.0-GA", jetty: "9.4.44.v20210927",