From d8e7c4136fe226b904b1824c3e5810c715252cdb Mon Sep 17 00:00:00 2001 From: Greg Schohn Date: Sat, 11 Nov 2023 18:13:41 -0500 Subject: [PATCH] Upgrade all projects to use netty 4.1.100 as per CVE See https://www.mend.io/vulnerability-database/CVE-2023-44487 Signed-off-by: Greg Schohn --- TrafficCapture/captureKafkaOffloader/build.gradle | 2 +- TrafficCapture/captureOffloader/build.gradle | 2 +- .../jsonJoltMessageTransformerProvider/build.gradle | 2 +- TrafficCapture/trafficReplayer/build.gradle | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/TrafficCapture/captureKafkaOffloader/build.gradle b/TrafficCapture/captureKafkaOffloader/build.gradle index 063cec0c8..147eec8dc 100644 --- a/TrafficCapture/captureKafkaOffloader/build.gradle +++ b/TrafficCapture/captureKafkaOffloader/build.gradle @@ -9,7 +9,7 @@ repositories { } dependencies { - api 'io.netty:netty-buffer:4.1.89.Final' + api 'io.netty:netty-buffer:4.1.100.Final' implementation project(':captureOffloader') implementation project(':coreUtilities') implementation 'org.projectlombok:lombok:1.18.26' diff --git a/TrafficCapture/captureOffloader/build.gradle b/TrafficCapture/captureOffloader/build.gradle index 05cd9e96a..deabdf82d 100644 --- a/TrafficCapture/captureOffloader/build.gradle +++ b/TrafficCapture/captureOffloader/build.gradle @@ -21,7 +21,7 @@ sourceSets { } } dependencies { - api group: 'io.netty', name: 'netty-buffer', version: '4.1.89.Final' + api group: 'io.netty', name: 'netty-buffer', version: '4.1.100.Final' implementation project(':captureProtobufs') implementation "com.google.protobuf:protobuf-java:3.22.2" diff --git a/TrafficCapture/replayerPlugins/jsonMessageTransformers/jsonJoltMessageTransformerProvider/build.gradle b/TrafficCapture/replayerPlugins/jsonMessageTransformers/jsonJoltMessageTransformerProvider/build.gradle index 73bc1b03d..a974d3aea 100644 --- a/TrafficCapture/replayerPlugins/jsonMessageTransformers/jsonJoltMessageTransformerProvider/build.gradle +++ b/TrafficCapture/replayerPlugins/jsonMessageTransformers/jsonJoltMessageTransformerProvider/build.gradle @@ -18,7 +18,7 @@ dependencies { testImplementation testFixtures(project(path: ':trafficReplayer')) testImplementation group: 'com.fasterxml.jackson.core', name: 'jackson-databind', version: '2.15.0' - testImplementation group: 'io.netty', name: 'netty-all', version: '4.1.94.Final' + testImplementation group: 'io.netty', name: 'netty-all', version: '4.1.100.Final' testImplementation group: 'org.junit.jupiter', name:'junit-jupiter-api', version:'5.9.3' testImplementation group: 'org.junit.jupiter', name:'junit-jupiter-params', version:'5.9.3' testImplementation group: 'org.slf4j', name: 'slf4j-api', version: '2.0.7' diff --git a/TrafficCapture/trafficReplayer/build.gradle b/TrafficCapture/trafficReplayer/build.gradle index 2b78e428b..7af608c7c 100644 --- a/TrafficCapture/trafficReplayer/build.gradle +++ b/TrafficCapture/trafficReplayer/build.gradle @@ -66,7 +66,7 @@ dependencies { testFixturesImplementation group: 'org.slf4j', name: 'slf4j-api', version: '2.0.7' testFixturesImplementation group: 'com.fasterxml.jackson.core', name: 'jackson-databind', version: '2.15.0' - testFixturesImplementation group: 'io.netty', name: 'netty-all', version: '4.1.94.Final' + testFixturesImplementation group: 'io.netty', name: 'netty-all', version: '4.1.100.Final' testFixturesImplementation group: 'org.junit.jupiter', name:'junit-jupiter-api', version:'5.9.3'