Merge pull request #15758 from h2oai/mn/GH-15757

[GH-15757] Upgrade org.jetbrains.kotlin:kotlin-stdlib in Main and Steam Standalone Jar
h2oai · Sep 14, 2023 · 477ebc8 · 477ebc8
2 parents 04aaff9 + 9334978
commit 477ebc8
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/h2o-assemblies/main/build.gradle b/h2o-assemblies/main/build.gradle
@@ -57,6 +57,10 @@ dependencies {
         api('net.minidev:json-smart:2.4.10') {
             because 'Fixes CVE-2023-1370'
         }
+        api('org.jetbrains.kotlin:kotlin-stdlib:1.6.21') {
+            because 'Fixes CVE-2020-29582'
+            because 'Fixes CVE-2022-24329'
+        }
         api('org.codehaus.jettison:jettison:1.5.4') {
             because 'Fixes CVE-2023-1436'
             because 'Fixes CVE-2022-45693'

diff --git a/h2o-assemblies/steam/build.gradle b/h2o-assemblies/steam/build.gradle
@@ -65,8 +65,9 @@ dependencies {
             because 'Fixes CVE-2022-40150'
             because 'Fixes CVE-2022-40149'
         }
-        api('org.jetbrains.kotlin:kotlin-stdlib:1.4.32') {
+        api('org.jetbrains.kotlin:kotlin-stdlib:1.6.21') {
             because 'Fixes CVE-2020-29582'
+            because 'Fixes CVE-2022-24329'
         }
         api('com.google.guava:guava:32.0.1-jre') {
             because 'Fixes CVE-2023-2976'