Upgrade the postgres lib to prevent CVE-2024-1597

conductor-oss · Mar 1, 2024 · edbbce9 · edbbce9
1 parent 2b86a87
commit edbbce9
Show file tree

Hide file tree

Showing 4 changed files with 4 additions and 2 deletions.
diff --git a/dependencies.gradle b/dependencies.gradle
@@ -32,6 +32,7 @@ ext {
     revGuava = '30.0-jre'
     revHamcrestAllMatchers = '1.8'
     revHealth = '1.1.4'
+    revPostgres = '42.7.2'
     revProtoBuf = '3.21.12'
     revJakartaAnnotation = '2.1.1'
     revJAXB = '4.0.1'

diff --git a/postgres-external-storage/build.gradle b/postgres-external-storage/build.gradle
@@ -5,7 +5,7 @@ dependencies {
     compileOnly 'org.springframework.boot:spring-boot-starter'
     compileOnly 'org.springframework.boot:spring-boot-starter-web'
 
-    implementation 'org.postgresql:postgresql'
+    implementation "org.postgresql:postgresql:${revPostgres}"
     implementation 'org.springframework.boot:spring-boot-starter-jdbc'
     implementation 'org.flywaydb:flyway-core'
     implementation "org.springdoc:springdoc-openapi-starter-webmvc-ui:${revSpringDoc}"

diff --git a/postgres-persistence/build.gradle b/postgres-persistence/build.gradle
@@ -13,7 +13,7 @@ dependencies {
     implementation "com.fasterxml.jackson.core:jackson-core"
 
     implementation "org.apache.commons:commons-lang3"
-    implementation "org.postgresql:postgresql:42.3.8"
+    implementation "org.postgresql:postgresql:${revPostgres}"
     implementation "org.springframework.boot:spring-boot-starter-jdbc"
     implementation "org.flywaydb:flyway-core"
 

diff --git a/server/build.gradle b/server/build.gradle
@@ -65,6 +65,7 @@ dependencies {
     implementation 'org.springframework.boot:spring-boot-starter-log4j2'
     implementation 'org.apache.logging.log4j:log4j-web'
     implementation "redis.clients:jedis:${revJedis}"
+    implementation "org.postgresql:postgresql:${revPostgres}"
 
     implementation 'org.springframework.boot:spring-boot-starter-actuator'
     implementation ("io.orkes.queues:orkes-conductor-queues:${revOrkesQueues}") {