Skip to content

Commit

Permalink
Fix io.netty.codec and org json vulnerabilities (#126)
Browse files Browse the repository at this point in the history
  • Loading branch information
@AHabes
AHabes authored Oct 17, 2023
1 parent fd986a2 commit 1344dbf
Show file tree
Hide file tree
Showing 4 changed files with 102 additions and 7 deletions.
47 changes: 45 additions & 2 deletions service/application/pom.xml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,7 @@
<spring-security-rsa.version>1.1.1</spring-security-rsa.version>
<spring-kafka.version>3.0.10</spring-kafka.version>
<kafka-clients.version>3.5.0</kafka-clients.version>
<spring-boot-starter-webflux.version>3.1.4</spring-boot-starter-webflux.version>
</properties>
<repositories>
<repository>
Expand Down Expand Up @@ -183,11 +184,12 @@
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-webflux</artifactId>
<version>${spring-boot-starter-webflux.version}</version>
</dependency>
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-codec-http</artifactId>
<version>4.1.94.Final</version>
<version>4.1.100.Final</version>
</dependency>
<dependency>
<groupId>org.apache.commons</groupId>
Expand All @@ -197,8 +199,49 @@
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-handler</artifactId>
<version>4.1.94.Final</version>
<version>4.1.100.Final</version>
</dependency>
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-codec</artifactId>
<version>4.1.100.Final</version>
</dependency>
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-codec-http2</artifactId>
<version>4.1.100.Final</version>
</dependency>
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-buffer</artifactId>
<version>4.1.100.Final</version>
</dependency>
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-common</artifactId>
<version>4.1.100.Final</version>
</dependency>
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-transport</artifactId>
<version>4.1.100.Final</version>
</dependency>
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-resolver-dns</artifactId>
<version>4.1.100.Final</version>
</dependency>
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-codec-dns</artifactId>
<version>4.1.100.Final</version>
</dependency>
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-codec-socks</artifactId>
<version>4.1.100.Final</version>
</dependency>

<!-- logback/logstash integration -->
<dependency>
<groupId>net.logstash.logback</groupId>
Expand Down
2 changes: 1 addition & 1 deletion service/local-storage-plugin/pom.xml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@
<properties>
<maven.compiler.source>17</maven.compiler.source>
<maven.compiler.target>17</maven.compiler.target>
<org.json.version>20230227</org.json.version>
<org.json.version>20231013</org.json.version>
<camel.version>4.0.0-RC2</camel.version>
<snakeyaml.version>2.0</snakeyaml.version>
<jacksondatabind.version>2.13.4.2</jacksondatabind.version>
Expand Down
56 changes: 54 additions & 2 deletions service/plugin/pom.xml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -17,6 +17,7 @@
<maven.compiler.source>${java.version}</maven.compiler.source>
<maven.compiler.target>${java.version}</maven.compiler.target>
<snakeyaml.version>2.0</snakeyaml.version>
<spring-boot-starter-webflux.version>3.1.4</spring-boot-starter-webflux.version>
</properties>
<dependencies>
<dependency>
Expand Down Expand Up @@ -50,16 +51,67 @@
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-webflux</artifactId>
<version>${spring-boot-starter-webflux.version}</version>
</dependency>
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-codec-http</artifactId>
<version>4.1.94.Final</version>
<version>4.1.100.Final</version>
</dependency>
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-handler</artifactId>
<version>4.1.94.Final</version>
<version>4.1.100.Final</version>
</dependency>
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-codec</artifactId>
<version>4.1.100.Final</version>
</dependency>
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-codec-http2</artifactId>
<version>4.1.100.Final</version>
</dependency>
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-buffer</artifactId>
<version>4.1.100.Final</version>
</dependency>
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-common</artifactId>
<version>4.1.100.Final</version>
</dependency>
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-transport</artifactId>
<version>4.1.100.Final</version>
</dependency>
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-resolver</artifactId>
<version>4.1.100.Final</version>
</dependency>
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-resolver-dns</artifactId>
<version>4.1.100.Final</version>
</dependency>
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-codec-dns</artifactId>
<version>4.1.100.Final</version>
</dependency>
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-codec-socks</artifactId>
<version>4.1.100.Final</version>
</dependency>
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-handler</artifactId>
<version>4.1.100.Final</version>
</dependency>
<dependency>
<groupId>org.apache.camel.springboot</groupId>
Expand Down
4 changes: 2 additions & 2 deletions service/solace-plugin/pom.xml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@
<maven.compiler.target>17</maven.compiler.target>
<solace-messaging-client.version>1.0.0</solace-messaging-client.version>
<solclientj.version>10.0.0</solclientj.version>
<spring-boot-starter-webflux.version>3.1.2</spring-boot-starter-webflux.version>
<spring-boot-starter-webflux.version>3.1.4</spring-boot-starter-webflux.version>
<spring-boot-starter-test.version>3.1.2</spring-boot-starter-test.version>
<jupiter.version>5.3.1</jupiter.version>
<camel.version>4.0.0-RC2</camel.version>
Expand Down Expand Up @@ -51,7 +51,7 @@
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-codec-http</artifactId>
<version>4.1.94.Final</version>
<version>4.1.100.Final</version>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
Expand Down

0 comments on commit 1344dbf

Please sign in to comment.