Skip to content

Commit

Permalink
Fix CVE-2023-42794 : Update org.apache.tomcat.embed to 9.0.82 (#681)
Browse files Browse the repository at this point in the history
  • Loading branch information
lang-ben authored Mar 11, 2024
1 parent 801ed9d commit f853fe5
Show file tree
Hide file tree
Showing 2 changed files with 24 additions and 33 deletions.
2 changes: 1 addition & 1 deletion build.gradle
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,7 @@ def versions = [
springfoxSwagger : '3.0.0',
restAssured : '4.3.1',
cucumber : '5.5.0',
tomcatEmbedded : '9.0.75',
tomcatEmbedded : '9.0.82',
serviceAuthVersion : '3.1.4',
pact_version : '4.1.7',
]
Expand Down
55 changes: 23 additions & 32 deletions config/owasp/suppressions.xml
Original file line number Diff line number Diff line change
@@ -1,34 +1,25 @@
<?xml version="1.0" encoding="UTF-8"?><suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
<suppress>
<notes>Temporary Suppression
CVE-2022-45688 refer https://tools.hmcts.net/jira/browse/CCD-4373
CVE-2023-34036 refer [Ticket]
CVE-2023-20873 refer [Ticket]
CVE-2023-41080 refer [Ticket]
CVE-2023-42794 refer [Ticket]
CVE-2023-42795 refer [Ticket]
CVE-2023-45648 refer [Ticket]
CVE-2023-44487 refer [Ticket]
CVE-2023-5072 refer [Ticket]
CVE-2023-33202 refer [Ticket]
CVE-2023-34055 refer [Ticket]
CVE-2023-46589 refer [Ticket]
CVE-2023-6378 refer [Ticket]
CVE-2023-35116 refer [Ticket]</notes>
<cve>CVE-2022-45688</cve>
<cve>CVE-2023-34036</cve>
<cve>CVE-2023-20873</cve>
<cve>CVE-2023-41080</cve>
<cve>CVE-2023-42794</cve>
<cve>CVE-2023-42795</cve>
<cve>CVE-2023-45648</cve>
<cve>CVE-2023-44487</cve>
<cve>CVE-2023-5072</cve>
<cve>CVE-2023-33202</cve>
<cve>CVE-2023-34055</cve>
<cve>CVE-2023-46589</cve>
<cve>CVE-2023-6378</cve>
<cve>CVE-2023-35116</cve>
<cve>CVE-2023-34042</cve>
</suppress>
<suppress>
<notes>Temporary Suppression
CVE-2023-33202 refer [Ticket]
CVE-2023-35116 refer [Ticket]
CVE-2022-45688 refer [Ticket]
CVE-2023-5072 refer [Ticket]
CVE-2023-6378 refer [Ticket]
CVE-2023-34055 refer [Ticket]
CVE-2023-20873 refer [Ticket]
CVE-2023-34036 refer [Ticket]
CVE-2023-34042 refer [Ticket]
CVE-2023-46589 refer [Ticket]</notes>
<cve>CVE-2023-33202</cve>
<cve>CVE-2023-35116</cve>
<cve>CVE-2022-45688</cve>
<cve>CVE-2023-5072</cve>
<cve>CVE-2023-6378</cve>
<cve>CVE-2023-34055</cve>
<cve>CVE-2023-20873</cve>
<cve>CVE-2023-34036</cve>
<cve>CVE-2023-34042</cve>
<cve>CVE-2023-46589</cve>
</suppress>
</suppressions>

0 comments on commit f853fe5

Please sign in to comment.