Skip to content

Commit ba1c3d6

Browse files
Version update and CVE suppression (#958)
1 parent b1a06f3 commit ba1c3d6

File tree

2 files changed

+11
-2
lines changed

2 files changed

+11
-2
lines changed

dependencyCheckSuppression.xml

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -378,5 +378,14 @@
378378
<packageUrl regex="true">^pkg:maven/org\.springframework/spring-web@.*$</packageUrl>
379379
<vulnerabilityName>CVE-2024-38828</vulnerabilityName>
380380
</suppress>
381+
382+
<!-- We don't use the sun.io.useCanonCaches setting referenced by this CVE. -->
383+
<suppress>
384+
<notes><![CDATA[
385+
file name: tomcat-catalina-10.1.34.jar
386+
]]></notes>
387+
<packageUrl regex="true">^pkg:maven/org\.apache\.tomcat/tomcat-catalina@.*$</packageUrl>
388+
<vulnerabilityName>CVE-2024-56337</vulnerabilityName>
389+
</suppress>
381390
</suppressions>
382391

gradle.properties

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -95,9 +95,9 @@ annotationsVersion=15.0
9595
antVersion=1.10.13
9696

9797
#Unifying version used by DISCVR and Premium
98-
apacheDirectoryVersion=2.1.3
98+
apacheDirectoryVersion=2.1.7
9999
#Transitive dependency of Apache directory: 2.0.18 contains some regressions
100-
apacheMinaVersion=2.2.1
100+
apacheMinaVersion=2.2.4
101101

102102
# Usually matches the version specified as a Spring Boot dependency (see springBootVersion below)
103103
apacheTomcatVersion=10.1.34

0 commit comments

Comments
 (0)