From 76334df89c1cd9be43c44c503f6cbec7be61be0b Mon Sep 17 00:00:00 2001 From: Gagan Juneja Date: Wed, 11 Dec 2024 01:04:14 +0530 Subject: [PATCH] Fixes CVE-2024-7254 (#586) Signed-off-by: Gagan Juneja Co-authored-by: Gagan Juneja (cherry picked from commit 4612c6c3d4ee65dfea68c951c314759d6d8ad758) --- build.gradle | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/build.gradle b/build.gradle index 3a3dad19..6051b65b 100644 --- a/build.gradle +++ b/build.gradle @@ -370,11 +370,11 @@ dependencies { implementation group: 'commons-io', name: 'commons-io', version: '2.14.0' implementation group: 'com.google.errorprone', name: 'error_prone_annotations', version: '2.9.0' implementation group: 'com.google.protobuf', name: 'protobuf-java', version: "${protobufVersion}" - implementation 'io.grpc:grpc-netty:1.56.1' - implementation 'io.grpc:grpc-protobuf:1.56.1' + implementation 'io.grpc:grpc-netty:1.68.1' + implementation 'io.grpc:grpc-protobuf:1.68.1' implementation("io.netty:netty-codec-http2:${nettyVersion}") implementation("io.netty:netty-handler-proxy:${nettyVersion}") - implementation 'io.grpc:grpc-stub:1.52.1' + implementation 'io.grpc:grpc-stub:1.68.1' implementation "jakarta.annotation:jakarta.annotation-api:${jakartaVersion}" // JDK9+ has to run powermock 2+. https://github.com/powermock/powermock/issues/888