Skip to content

Commit

Permalink
[NOID] Bump snakeyaml version
Browse files Browse the repository at this point in the history
Fixes CVE-2022-25857
Fixes CVE-2022-38749
Fixes CVE-2022-38750
Fixes CVE-2022-38751
Fixes CVE-2022-38752

changelog: [4.3, security] Bumped snakeyaml to 1.32 to mitigate CVE-2022-25857, CVE-2022-38749, CVE-2022-38750, CVE-2022-38751, CVE-2022-38752
  • Loading branch information
fbiville committed Nov 18, 2022
1 parent a00ea54 commit d860983
Show file tree
Hide file tree
Showing 2 changed files with 3 additions and 3 deletions.
4 changes: 2 additions & 2 deletions core/build.gradle
Original file line number Diff line number Diff line change
Expand Up @@ -70,7 +70,7 @@ dependencies {
exclude module: "commons-lang3"
exclude module: "commons-text"
}
compile group: 'org.yaml', name: 'snakeyaml', version: '1.26'
compile group: 'org.yaml', name: 'snakeyaml', version: '1.32'
compile group: 'com.github.seancfoley', name: 'ipaddress', version: '5.3.3'
testCompile group: 'com.github.stefanbirkner', name: 'system-rules', version: '1.19.0'
compile(group: 'org.apache.commons', name: 'commons-lang3')
Expand Down Expand Up @@ -185,4 +185,4 @@ if (System.env.CI == 'true') {
task copyRuntimeLibs(type: Copy) {
into "lib"
from configurations.testRuntime
}
}
2 changes: 1 addition & 1 deletion full/build.gradle
Original file line number Diff line number Diff line change
Expand Up @@ -86,7 +86,7 @@ dependencies {
exclude module: "commons-lang3"
exclude module: "commons-text"
}
compile group: 'org.yaml', name: 'snakeyaml', version: '1.26'
compile group: 'org.yaml', name: 'snakeyaml', version: '1.32'
testCompile group: 'com.github.stefanbirkner', name: 'system-rules', version: '1.19.0'

testCompile 'net.sourceforge.jexcelapi:jxl:2.6.12'
Expand Down

0 comments on commit d860983

Please sign in to comment.