[GH-15746] Upgrade org.codehaus.jettison:jettison in Main Standalone Jar

h2oai · Sep 12, 2023 · 37c2d9f · 37c2d9f
1 parent 458c011
commit 37c2d9f
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/h2o-assemblies/main/build.gradle b/h2o-assemblies/main/build.gradle
@@ -51,6 +51,13 @@ dependencies {
         api('com.fasterxml.jackson.core:jackson-databind:2.13.4.2') {
             because 'Fixes CVE-2022-42003'
         }
+        api('org.codehaus.jettison:jettison:1.5.4') {
+            because 'Fixes CVE-2023-1436'
+            because 'Fixes CVE-2022-45693'
+            because 'Fixes CVE-2022-45685'
+            because 'Fixes CVE-2022-40150'
+            because 'Fixes CVE-2022-40149'
+        }
         api('com.google.guava:guava:32.0.1-jre') {
             because 'Fixes CVE-2023-2976'
             because 'Fixes CVE-2020-8908'

diff --git a/h2o-assemblies/steam/build.gradle b/h2o-assemblies/steam/build.gradle
@@ -63,6 +63,7 @@ dependencies {
             because 'Fixes CVE-2022-45693'
             because 'Fixes CVE-2022-45685'
             because 'Fixes CVE-2022-40150'
+            because 'Fixes CVE-2022-40149'
         }
         api('org.jetbrains.kotlin:kotlin-stdlib:1.4.32') {
             because 'Fixes CVE-2020-29582'