Merge pull request #15747 from h2oai/mn/GH-15746

[GH-15746] Upgrade org.codehaus.jettison:jettison in Main Standalone Jar
h2oai · Sep 14, 2023 · aa210d9 · aa210d9
2 parents e8a3ddf + e555a57
commit aa210d9
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/h2o-assemblies/main/build.gradle b/h2o-assemblies/main/build.gradle
@@ -54,6 +54,13 @@ dependencies {
         api('net.minidev:json-smart:2.4.10') {
             because 'Fixes CVE-2023-1370'
         }
+        api('org.codehaus.jettison:jettison:1.5.4') {
+            because 'Fixes CVE-2023-1436'
+            because 'Fixes CVE-2022-45693'
+            because 'Fixes CVE-2022-45685'
+            because 'Fixes CVE-2022-40150'
+            because 'Fixes CVE-2022-40149'
+        }
         api('com.google.guava:guava:32.0.1-jre') {
             because 'Fixes CVE-2023-2976'
             because 'Fixes CVE-2020-8908'

diff --git a/h2o-assemblies/steam/build.gradle b/h2o-assemblies/steam/build.gradle
@@ -63,6 +63,7 @@ dependencies {
             because 'Fixes CVE-2022-45693'
             because 'Fixes CVE-2022-45685'
             because 'Fixes CVE-2022-40150'
+            because 'Fixes CVE-2022-40149'
         }
         api('org.jetbrains.kotlin:kotlin-stdlib:1.4.32') {
             because 'Fixes CVE-2020-29582'