GH-16342 - Fix vulnerabilities in dnsjava (#16343)

* GH-16342 - Fix SNYK-JAVA-DNSJAVA-7547403, SNYK-JAVA-DNSJAVA-7547404, SNYK-JAVA-DNSJAVA-7547405, CVE-2024-25638 with dnsjava upgrade * add csv message
h2oai · Aug 2, 2024 · e059ae8 · e059ae8
1 parent a24dd87
commit e059ae8
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/h2o-assemblies/main/build.gradle b/h2o-assemblies/main/build.gradle
@@ -88,6 +88,12 @@ dependencies {
         api('org.apache.commons:commons-configuration2:2.10.1') {
             because 'Fixes CVE-2024-29131'
         }
+        api('dnsjava:dnsjava:3.6.0') {
+            because 'Fixes SNYK-JAVA-DNSJAVA-7547403'
+            because 'Fixes SNYK-JAVA-DNSJAVA-7547404'
+            because 'Fixes SNYK-JAVA-DNSJAVA-7547405'
+            because 'Fixes CVE-2024-25638'
+        }
     }
 }
 

diff --git a/h2o-assemblies/steam/build.gradle b/h2o-assemblies/steam/build.gradle
@@ -84,6 +84,12 @@ dependencies {
         api('org.apache.commons:commons-configuration2:2.10.1') {
             because 'Fixes CVE-2024-29131'
         }
+        api('dnsjava:dnsjava:3.6.0') {
+            because 'Fixes SNYK-JAVA-DNSJAVA-7547403'
+            because 'Fixes SNYK-JAVA-DNSJAVA-7547404'
+            because 'Fixes SNYK-JAVA-DNSJAVA-7547405'
+            because 'Fixes CVE-2024-25638'
+        }
     }
 }