From cf6034a22b441824991baf8ebeb265ba9e18049d Mon Sep 17 00:00:00 2001 From: Marcel Bochtler Date: Thu, 11 Apr 2024 10:53:58 +0200 Subject: [PATCH] deps: Update S3 to version 2.25.28 This updated version updates netty-codec-http to version `4.1.108.Final` which fixed the vulnerability CVE-2024-29025 [1]. Unfortunately, no release notes are published. [1]: https://nvd.nist.gov/vuln/detail/CVE-2024-29025 Signed-off-by: Marcel Bochtler --- gradle/libs.versions.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml index 96abaecbe30d3..2b8da8a85f941 100644 --- a/gradle/libs.versions.toml +++ b/gradle/libs.versions.toml @@ -51,7 +51,7 @@ postgres = "42.7.3" postgresEmbedded = "1.0.3" reflections = "0.10.2" retrofit = "2.11.0" -s3 = "2.25.0" +s3 = "2.25.28" saxonHe = "12.4" scanoss = "1.1.6" semver4j = "5.2.3"