Skip to content

Commit 397b29e

Browse files
authored
CORE-17117: Update version of commons-compress to address CVE-2023-42503, part 2 (#1283)
Ensure that even the plugins will be using most up-to-date version.
1 parent 931648d commit 397b29e

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

data/avro-schema/build.gradle

+7
Original file line numberDiff line numberDiff line change
@@ -27,6 +27,13 @@ dependencies {
2727
compileOnly 'org.osgi:osgi.annotation'
2828
}
2929

30+
configurations.all {
31+
resolutionStrategy {
32+
// CVE-2023-42503, current version of Avro uses an outdated version
33+
force "org.apache.commons:commons-compress:$commonsCompressVersion"
34+
}
35+
}
36+
3037
description 'Data Model Definitions'
3138

3239
def generatedAvroDir = layout.buildDirectory.dir('generated-avro')

0 commit comments

Comments
 (0)