From 6391b03eaca6f25d61b09eebaf0357e1b1905a0e Mon Sep 17 00:00:00 2001 From: Craig Anderson Date: Tue, 31 Dec 2024 17:23:58 -0800 Subject: [PATCH] Upgrade dnsjava:dnsjava to 3.6.2 for CVE-2023-50387. Issue is #6400. --- lib/aareadme.txt | 2 +- src/dist/src/dist/expected_release_jars.csv | 2 +- src/licenses/build.gradle.kts | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/lib/aareadme.txt b/lib/aareadme.txt index ee01ff8812d..b4f1db92263 100644 --- a/lib/aareadme.txt +++ b/lib/aareadme.txt @@ -97,7 +97,7 @@ darcula https://github.com/bulenkov/Darcula/ - Look and Feel -dnsjava-2.1.9 +dnsjava-3.6.2 ----------------- https://github.com/dnsjava/dnsjava - DNSCacheManager diff --git a/src/dist/src/dist/expected_release_jars.csv b/src/dist/src/dist/expected_release_jars.csv index a6b456bff17..cbca4b4153a 100644 --- a/src/dist/src/dist/expected_release_jars.csv +++ b/src/dist/src/dist/expected_release_jars.csv @@ -50,7 +50,7 @@ 353322,datamodel-jvm-4.1.0.jar 98115,dec-0.1.2.jar 95287,deprecated-in-v4-jvm-4.1.0.jar -320748,dnsjava-2.1.9.jar +320748,dnsjava-3.6.2.jar 16829,error_prone_annotations-2.24.0.jar 1736381,freemarker-2.3.32.jar 32359,geronimo-jms_1.1_spec-1.1.1.jar diff --git a/src/licenses/build.gradle.kts b/src/licenses/build.gradle.kts index e2292467861..513d0099227 100644 --- a/src/licenses/build.gradle.kts +++ b/src/licenses/build.gradle.kts @@ -104,7 +104,7 @@ val gatherBinaryLicenses by tasks.registering(GatherLicenseTask::class) { // That enables to have "version-independent" MIT license in licenses/slf4j-api, and // it would be copied provided the detected license for slf4j-api is MIT. - overrideLicense("dnsjava:dnsjava:2.1.9") { + overrideLicense("dnsjava:dnsjava:3.6.2") { expectedLicense = SpdxLicense.BSD_2_Clause }