From 386d6abfb8598b26a039e68eb18d388b15c4b741 Mon Sep 17 00:00:00 2001 From: Will Mooreston Date: Mon, 28 Oct 2024 10:47:51 -0700 Subject: [PATCH] bump spring and tomcat versions for CVE-2024-38819, CVE-2024-38820 --- gradle.properties | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/gradle.properties b/gradle.properties index 3b6b9786a6..aa7c2ee56f 100644 --- a/gradle.properties +++ b/gradle.properties @@ -103,7 +103,7 @@ apacheDirectoryVersion=2.1.3 apacheMinaVersion=2.2.1 # Keep in sync with springBootTomcatVersion below -apacheTomcatVersion=10.1.30 +apacheTomcatVersion=10.1.31 # (mothership) -> json-path -> json-smart -> accessor-smart # (core) -> graalvm @@ -286,12 +286,12 @@ slf4jLog4jApiVersion=2.0.12 # This is a dependency for HTSJDK. Force version for CVE-2023-43642 snappyJavaVersion=1.1.10.5 -springBootVersion=3.3.4 +springBootVersion=3.3.5 # This usually matches the Tomcat version dictated by springBootVersion # Also, keep this in sync with apacheTomcatVersion above -springBootTomcatVersion=10.1.30 +springBootTomcatVersion=10.1.31 # This usually matches the Spring Framework version dictated by springBootVersion -springVersion=6.1.13 +springVersion=6.1.14 sqliteJdbcVersion=3.46.0.0