[CVE-2023] fix multiple cve issues

Signed-off-by: Chenyang Ji <[email protected]>
opensearch-project · Aug 4, 2023 · 59a691f · 59a691f
1 parent d28290a
commit 59a691f
Show file tree

Hide file tree

Showing 48 changed files with 27 additions and 27 deletions.
diff --git a/build.gradle b/build.gradle
@@ -240,13 +240,13 @@ dependencies {
         }
     }
 
-    compile('com.google.guava:guava:30.1-jre') {
+    compile('com.google.guava:guava:32.0.1-jre') {
         force = 'true'
     }
     compile 'org.jooq:jooq:3.10.8'
     compile 'org.apache.commons:commons-lang3:3.9'
-    compile 'org.bouncycastle:bcprov-jdk15on:1.70'
-    compile 'org.bouncycastle:bcpkix-jdk15on:1.70'
+    compile 'org.bouncycastle:bcprov-jdk15to18:1.74'
+    compile 'org.bouncycastle:bcpkix-jdk15to18:1.74'
     compile "org.opensearch:performanceanalyzer-rca:${version}"
     compile "com.fasterxml.jackson.core:jackson-annotations:${jacksonVersion}"
     compile "com.fasterxml.jackson.core:jackson-databind:${jacksonDataBindVersion}"

diff --git a/licenses/bcpkix-jdk15on-1.70.jar.sha1 b/licenses/bcpkix-jdk15on-1.70.jar.sha1
diff --git a/licenses/bcpkix-jdk15to18-1.74.jar.sha1 b/licenses/bcpkix-jdk15to18-1.74.jar.sha1
@@ -0,0 +1 @@
+a29da9d05899555ecc567a3b4ffb03fe656d6084
diff --git a/licenses/bcprov-jdk15on-1.70.jar.sha1 b/licenses/bcprov-jdk15on-1.70.jar.sha1
diff --git a/licenses/bcprov-jdk15to18-1.74.jar.sha1 b/licenses/bcprov-jdk15to18-1.74.jar.sha1
@@ -0,0 +1 @@
+b1a91d0d102042e4ec02084384e1b52b73f125ab
diff --git a/licenses/bcutil-jdk15on-1.70.jar.sha1 b/licenses/bcutil-jdk15on-1.70.jar.sha1
diff --git a/licenses/bcutil-jdk15to18-1.74.jar.sha1 b/licenses/bcutil-jdk15to18-1.74.jar.sha1
@@ -0,0 +1 @@
+d5596e3018ae86eb72b7e3deefcdf096f173d0d3
diff --git a/licenses/checker-qual-3.33.0.jar.sha1 b/licenses/checker-qual-3.33.0.jar.sha1
@@ -0,0 +1 @@
+de2b60b62da487644fc11f734e73c8b0b431238f
diff --git a/licenses/checker-qual-3.5.0.jar.sha1 b/licenses/checker-qual-3.5.0.jar.sha1
diff --git a/licenses/commons-lang3-3.12.0.jar.sha1 b/licenses/commons-lang3-3.12.0.jar.sha1
@@ -0,0 +1 @@
+c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e
diff --git a/licenses/commons-lang3-3.9.jar.sha1 b/licenses/commons-lang3-3.9.jar.sha1
diff --git a/licenses/guava-30.1-jre.jar.sha1 b/licenses/guava-30.1-jre.jar.sha1
diff --git a/licenses/guava-32.0.1-jre.jar.sha1 b/licenses/guava-32.0.1-jre.jar.sha1
@@ -0,0 +1 @@
+6e5d51a72d142f2d40a57dfb897188b36a95b489
diff --git a/licenses/j2objc-annotations-1.3.jar.sha1 b/licenses/j2objc-annotations-1.3.jar.sha1
diff --git a/licenses/j2objc-annotations-2.8.jar.sha1 b/licenses/j2objc-annotations-2.8.jar.sha1
@@ -0,0 +1 @@
+c85270e307e7b822f1086b93689124b89768e273
diff --git a/licenses/jackson-annotations-2.14.1.jar.sha1 b/licenses/jackson-annotations-2.14.1.jar.sha1
diff --git a/licenses/jackson-annotations-2.14.2.jar.sha1 b/licenses/jackson-annotations-2.14.2.jar.sha1
@@ -0,0 +1 @@
+a7aae9525864930723e3453ab799521fdfd9d873
diff --git a/licenses/jackson-databind-2.14.1.jar.sha1 b/licenses/jackson-databind-2.14.1.jar.sha1
diff --git a/licenses/jackson-databind-2.14.2.jar.sha1 b/licenses/jackson-databind-2.14.2.jar.sha1
@@ -0,0 +1 @@
+01e71fddbc80bb86f71a6345ac1e8ab8a00e7134
diff --git a/licenses/jackson-module-paranamer-2.14.1.jar.sha1 b/licenses/jackson-module-paranamer-2.14.1.jar.sha1
diff --git a/licenses/jackson-module-paranamer-2.14.2.jar.sha1 b/licenses/jackson-module-paranamer-2.14.2.jar.sha1
@@ -0,0 +1 @@
+1258e1272442006d5bf67331a3701d6d768bafcb
diff --git a/licenses/netty-buffer-4.1.84.Final.jar.sha1 b/licenses/netty-buffer-4.1.84.Final.jar.sha1
diff --git a/licenses/netty-buffer-4.1.96.Final.jar.sha1 b/licenses/netty-buffer-4.1.96.Final.jar.sha1
@@ -0,0 +1 @@
+4b80fffbe77485b457bf844289bf1801f61b9e91
diff --git a/licenses/netty-codec-4.1.84.Final.jar.sha1 b/licenses/netty-codec-4.1.84.Final.jar.sha1
diff --git a/licenses/netty-codec-4.1.96.Final.jar.sha1 b/licenses/netty-codec-4.1.96.Final.jar.sha1
@@ -0,0 +1 @@
+9cfe430f8b14e7ba86969d8e1126aa0aae4d18f0
diff --git a/licenses/netty-codec-http-4.1.84.Final.jar.sha1 b/licenses/netty-codec-http-4.1.84.Final.jar.sha1
diff --git a/licenses/netty-codec-http-4.1.96.Final.jar.sha1 b/licenses/netty-codec-http-4.1.96.Final.jar.sha1
@@ -0,0 +1 @@
+a4d0d95df5026965c454902ef3d6d84b81f89626
diff --git a/licenses/netty-codec-http2-4.1.84.Final.jar.sha1 b/licenses/netty-codec-http2-4.1.84.Final.jar.sha1
diff --git a/licenses/netty-codec-http2-4.1.96.Final.jar.sha1 b/licenses/netty-codec-http2-4.1.96.Final.jar.sha1
@@ -0,0 +1 @@
+cc8baf4ff67c1bcc0cde60bc5c2bb9447d92d9e6
diff --git a/licenses/netty-codec-socks-4.1.84.Final.jar.sha1 b/licenses/netty-codec-socks-4.1.84.Final.jar.sha1
diff --git a/licenses/netty-codec-socks-4.1.96.Final.jar.sha1 b/licenses/netty-codec-socks-4.1.96.Final.jar.sha1
@@ -0,0 +1 @@
+f53c52dbddaa4a02a51430405792d3f30a89b147
diff --git a/licenses/netty-common-4.1.84.Final.jar.sha1 b/licenses/netty-common-4.1.84.Final.jar.sha1
diff --git a/licenses/netty-common-4.1.96.Final.jar.sha1 b/licenses/netty-common-4.1.96.Final.jar.sha1
@@ -0,0 +1 @@
+d10c167623cbc471753f950846df241d1021655c
diff --git a/licenses/netty-handler-4.1.84.Final.jar.sha1 b/licenses/netty-handler-4.1.84.Final.jar.sha1
diff --git a/licenses/netty-handler-4.1.96.Final.jar.sha1 b/licenses/netty-handler-4.1.96.Final.jar.sha1
@@ -0,0 +1 @@
+7840d7523d709e02961b647546f9d9dde1699306
diff --git a/licenses/netty-handler-proxy-4.1.84.Final.jar.sha1 b/licenses/netty-handler-proxy-4.1.84.Final.jar.sha1
diff --git a/licenses/netty-handler-proxy-4.1.96.Final.jar.sha1 b/licenses/netty-handler-proxy-4.1.96.Final.jar.sha1
@@ -0,0 +1 @@
+dcabd63f4aaec2b4cad7588bfdd4cd2c82287e38
diff --git a/licenses/netty-resolver-4.1.84.Final.jar.sha1 b/licenses/netty-resolver-4.1.84.Final.jar.sha1
diff --git a/licenses/netty-resolver-4.1.96.Final.jar.sha1 b/licenses/netty-resolver-4.1.96.Final.jar.sha1
@@ -0,0 +1 @@
+0e51db5568a881e0f9b013b35617c597dc32f130
diff --git a/licenses/netty-transport-4.1.84.Final.jar.sha1 b/licenses/netty-transport-4.1.84.Final.jar.sha1
diff --git a/licenses/netty-transport-4.1.96.Final.jar.sha1 b/licenses/netty-transport-4.1.96.Final.jar.sha1
@@ -0,0 +1 @@
+dbd15ca244be28e1a98ed29b9d755edbfa737e02
diff --git a/licenses/netty-transport-native-unix-common-4.1.84.Final.jar.sha1 b/licenses/netty-transport-native-unix-common-4.1.84.Final.jar.sha1
diff --git a/licenses/netty-transport-native-unix-common-4.1.96.Final.jar.sha1 b/licenses/netty-transport-native-unix-common-4.1.96.Final.jar.sha1
@@ -0,0 +1 @@
+daf8578cade63a01525ee9d70371fa78e6e91094
diff --git a/licenses/performanceanalyzer-rca-1.3.12.0-SNAPSHOT.jar.sha1 b/licenses/performanceanalyzer-rca-1.3.12.0-SNAPSHOT.jar.sha1
@@ -0,0 +1 @@
+7c8e44aaa3d80026d696d12889da7442dc5bd689
diff --git a/licenses/performanceanalyzer-rca-1.3.7.0-SNAPSHOT.jar.sha1 b/licenses/performanceanalyzer-rca-1.3.7.0-SNAPSHOT.jar.sha1
diff --git a/licenses/sqlite-jdbc-3.32.3.2.jar.sha1 b/licenses/sqlite-jdbc-3.32.3.2.jar.sha1
diff --git a/licenses/sqlite-jdbc-3.41.2.2.jar.sha1 b/licenses/sqlite-jdbc-3.41.2.2.jar.sha1
@@ -0,0 +1 @@
+ddeb8d3a3004f412ed19b4c98b3aec11d9452ab5
diff --git a/licenses/tools.jar.sha1 b/licenses/tools.jar.sha1
@@ -1 +1 @@
-9b9410a1a8847ae8f81a0ccb3acb4642f9ebe9d1
+47a38d27933a80f903d917bc79a94fc3ca6f3383