Revert "Upgrade the postgres lib to prevent CVE-2024-1597 (conductor-…

…oss#94)" This reverts commit 1f99f23.
preqin · May 2, 2024 · 3bd39c4 · 3bd39c4
1 parent 1f99f23
commit 3bd39c4
Show file tree

Hide file tree

Showing 4 changed files with 3 additions and 5 deletions.
diff --git a/dependencies.gradle b/dependencies.gradle
@@ -31,8 +31,7 @@ ext {
     revGrpc = '1.57.2'
     revGuava = '30.0-jre'
     revHamcrestAllMatchers = '1.8'
-    revHealth = '1.1.4'
-    revPostgres = '42.7.2'
+    revHealth = '1.1.+'
     revProtoBuf = '3.21.12'
     revJakartaAnnotation = '2.1.1'
     revJAXB = '4.0.1'

diff --git a/postgres-external-storage/build.gradle b/postgres-external-storage/build.gradle
@@ -5,7 +5,7 @@ dependencies {
     compileOnly 'org.springframework.boot:spring-boot-starter'
     compileOnly 'org.springframework.boot:spring-boot-starter-web'
 
-    implementation "org.postgresql:postgresql:${revPostgres}"
+    implementation 'org.postgresql:postgresql'
     implementation 'org.springframework.boot:spring-boot-starter-jdbc'
     implementation 'org.flywaydb:flyway-core'
     implementation "org.springdoc:springdoc-openapi-starter-webmvc-ui:${revSpringDoc}"

diff --git a/postgres-persistence/build.gradle b/postgres-persistence/build.gradle
@@ -13,7 +13,7 @@ dependencies {
     implementation "com.fasterxml.jackson.core:jackson-core"
 
     implementation "org.apache.commons:commons-lang3"
-    implementation "org.postgresql:postgresql:${revPostgres}"
+    implementation "org.postgresql:postgresql:42.3.8"
     implementation "org.springframework.boot:spring-boot-starter-jdbc"
     implementation "org.flywaydb:flyway-core"
 

diff --git a/server/build.gradle b/server/build.gradle
@@ -65,7 +65,6 @@ dependencies {
     implementation 'org.springframework.boot:spring-boot-starter-log4j2'
     implementation 'org.apache.logging.log4j:log4j-web'
     implementation "redis.clients:jedis:${revJedis}"
-    implementation "org.postgresql:postgresql:${revPostgres}"
 
     implementation 'org.springframework.boot:spring-boot-starter-actuator'