From 300788539633aac7f97bafcd73bd59390e36e207 Mon Sep 17 00:00:00 2001 From: AWSHurneyt Date: Tue, 27 Feb 2024 15:20:53 -0800 Subject: [PATCH 1/3] Adjusted dependency versions to address CVEs. Signed-off-by: AWSHurneyt --- alerting/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/alerting/build.gradle b/alerting/build.gradle index 53ae13cce..85ef2a017 100644 --- a/alerting/build.gradle +++ b/alerting/build.gradle @@ -101,7 +101,7 @@ dependencies { compile project(":alerting-core") compile project(":alerting-notification") - implementation "com.github.seancfoley:ipaddress:5.3.3" + implementation "com.github.seancfoley:ipaddress:5.4.1" testImplementation "org.jetbrains.kotlin:kotlin-test:${kotlin_version}" testCompile "org.mockito:mockito-core:3.12.4" From 90cc4d14c03f2f2e5fb98f8af6bbcf7c5094c473 Mon Sep 17 00:00:00 2001 From: AWSHurneyt Date: Tue, 27 Feb 2024 16:15:22 -0800 Subject: [PATCH 2/3] Adjusted com.github.seancfoley:ipaddress version to address CVE. Signed-off-by: AWSHurneyt --- alerting/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/alerting/build.gradle b/alerting/build.gradle index 85ef2a017..7fa72b0a7 100644 --- a/alerting/build.gradle +++ b/alerting/build.gradle @@ -101,7 +101,7 @@ dependencies { compile project(":alerting-core") compile project(":alerting-notification") - implementation "com.github.seancfoley:ipaddress:5.4.1" + implementation "com.github.seancfoley:ipaddress:5.4.2" testImplementation "org.jetbrains.kotlin:kotlin-test:${kotlin_version}" testCompile "org.mockito:mockito-core:3.12.4" From 7daed0a6929586ac1b0b45c88806d936f4dfd30b Mon Sep 17 00:00:00 2001 From: AWSHurneyt Date: Tue, 27 Feb 2024 17:19:15 -0800 Subject: [PATCH 3/3] Adjusted ktlint dependencies to address CVE. Signed-off-by: AWSHurneyt --- build.gradle | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/build.gradle b/build.gradle index b52f1e71c..df14562f1 100644 --- a/build.gradle +++ b/build.gradle @@ -44,7 +44,11 @@ dependencies { attributes { attribute(Bundling.BUNDLING_ATTRIBUTE, objects.named(Bundling, Bundling.EXTERNAL)) } + exclude group: "ch.qos.logback", module: "logback-classic" + exclude group: "ch.qos.logback", module: "logback-core" } + add("ktlint", "ch.qos.logback:logback-core:1.2.13") + add("ktlint", "ch.qos.logback:logback-classic:1.2.13") } task ktlint(type: JavaExec, group: "verification") {