Update guava to address CVE-2023-2976 (#1903)

Signed-off-by: Josh Aguilar <jaguilar3@atlassian.com>
opensearch-project · Jul 27, 2023 · d0a6f38 · d0a6f38
1 parent 5e9ef27
commit d0a6f38
Show file tree

Hide file tree

Showing 4 changed files with 4 additions and 4 deletions.
diff --git a/build.gradle b/build.gradle
@@ -144,7 +144,7 @@ configurations.all {
     exclude group: "commons-logging", module: "commons-logging"
     // enforce 1.1.3, https://www.whitesourcesoftware.com/vulnerability-database/WS-2019-0379
     resolutionStrategy.force 'commons-codec:commons-codec:1.13'
-    resolutionStrategy.force 'com.google.guava:guava:31.0.1-jre'
+    resolutionStrategy.force 'com.google.guava:guava:32.0.1-jre'
 }
 
 // updateVersion: Task to auto increment to the next development iteration

diff --git a/integ-test/build.gradle b/integ-test/build.gradle
@@ -51,7 +51,7 @@ configurations.all {
     exclude group: "commons-logging", module: "commons-logging"
     // enforce 1.1.3, https://www.whitesourcesoftware.com/vulnerability-database/WS-2019-0379
     resolutionStrategy.force 'commons-codec:commons-codec:1.13'
-    resolutionStrategy.force 'com.google.guava:guava:31.0.1-jre'
+    resolutionStrategy.force 'com.google.guava:guava:32.0.1-jre'
 }
 
 dependencies {

diff --git a/plugin/build.gradle b/plugin/build.gradle
@@ -58,7 +58,7 @@ configurations.all {
     exclude group: "commons-logging", module: "commons-logging"
     // enforce 1.1.3, https://www.whitesourcesoftware.com/vulnerability-database/WS-2019-0379
     resolutionStrategy.force 'commons-codec:commons-codec:1.13'
-    resolutionStrategy.force 'com.google.guava:guava:31.0.1-jre'
+    resolutionStrategy.force 'com.google.guava:guava:32.0.1-jre'
 }
 
 dependencies {

diff --git a/sql-jdbc/build.gradle b/sql-jdbc/build.gradle
@@ -58,7 +58,7 @@ dependencies {
     testImplementation('org.eclipse.jetty:jetty-server:11.0.14')
 
     // Enforce wiremock to use latest guava
-    testImplementation('com.google.guava:guava:31.1-jre')
+    testImplementation('com.google.guava:guava:32.0.1-jre')
 
     testRuntimeOnly('org.slf4j:slf4j-simple:1.7.25') // capture WireMock logging
 }