From 3e39a9832ea422aae2b6a7571aab2754ec0ace0e Mon Sep 17 00:00:00 2001 From: Adam Valenta Date: Mon, 29 Jul 2024 17:18:42 +0200 Subject: [PATCH 1/2] GH-16342 - Fix SNYK-JAVA-DNSJAVA-7547403, SNYK-JAVA-DNSJAVA-7547404, SNYK-JAVA-DNSJAVA-7547405 with dnsjava upgrade --- h2o-assemblies/main/build.gradle | 5 +++++ h2o-assemblies/steam/build.gradle | 5 +++++ 2 files changed, 10 insertions(+) diff --git a/h2o-assemblies/main/build.gradle b/h2o-assemblies/main/build.gradle index 32d4aff208de..f49daae4c6c6 100644 --- a/h2o-assemblies/main/build.gradle +++ b/h2o-assemblies/main/build.gradle @@ -88,6 +88,11 @@ dependencies { api('org.apache.commons:commons-configuration2:2.10.1') { because 'Fixes CVE-2024-29131' } + api('dnsjava:dnsjava:3.6.0') { + because 'Fixes SNYK-JAVA-DNSJAVA-7547403' + because 'Fixes SNYK-JAVA-DNSJAVA-7547404' + because 'Fixes SNYK-JAVA-DNSJAVA-7547405' + } } } diff --git a/h2o-assemblies/steam/build.gradle b/h2o-assemblies/steam/build.gradle index 2f177ecd991b..e47e592850ae 100644 --- a/h2o-assemblies/steam/build.gradle +++ b/h2o-assemblies/steam/build.gradle @@ -84,6 +84,11 @@ dependencies { api('org.apache.commons:commons-configuration2:2.10.1') { because 'Fixes CVE-2024-29131' } + api('dnsjava:dnsjava:3.6.0') { + because 'Fixes SNYK-JAVA-DNSJAVA-7547403' + because 'Fixes SNYK-JAVA-DNSJAVA-7547404' + because 'Fixes SNYK-JAVA-DNSJAVA-7547405' + } } } From c599c00713d59104bc800950adb8f1397c80b7e9 Mon Sep 17 00:00:00 2001 From: Adam Valenta Date: Thu, 1 Aug 2024 00:42:28 +0200 Subject: [PATCH 2/2] add csv message --- h2o-assemblies/main/build.gradle | 1 + h2o-assemblies/steam/build.gradle | 1 + 2 files changed, 2 insertions(+) diff --git a/h2o-assemblies/main/build.gradle b/h2o-assemblies/main/build.gradle index f49daae4c6c6..e1c421cdd9f8 100644 --- a/h2o-assemblies/main/build.gradle +++ b/h2o-assemblies/main/build.gradle @@ -92,6 +92,7 @@ dependencies { because 'Fixes SNYK-JAVA-DNSJAVA-7547403' because 'Fixes SNYK-JAVA-DNSJAVA-7547404' because 'Fixes SNYK-JAVA-DNSJAVA-7547405' + because 'Fixes CVE-2024-25638' } } } diff --git a/h2o-assemblies/steam/build.gradle b/h2o-assemblies/steam/build.gradle index e47e592850ae..6391acd96609 100644 --- a/h2o-assemblies/steam/build.gradle +++ b/h2o-assemblies/steam/build.gradle @@ -88,6 +88,7 @@ dependencies { because 'Fixes SNYK-JAVA-DNSJAVA-7547403' because 'Fixes SNYK-JAVA-DNSJAVA-7547404' because 'Fixes SNYK-JAVA-DNSJAVA-7547405' + because 'Fixes CVE-2024-25638' } } }