Skip to content

Commit 08b90f2

Browse files
authored
Upgrade jetty version in build.gradle
this is to address CVE-2024-6763 vulnerability
1 parent 1cadc5f commit 08b90f2

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

runners/google-cloud-dataflow-java/worker/build.gradle

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -131,7 +131,7 @@ applyJavaNature(
131131
dependencies {
132132
// We have to include jetty-server/jetty-servlet and all of its transitive dependencies
133133
// which includes several org.eclipse.jetty artifacts + servlet-api
134-
include(dependency("org.eclipse.jetty:.*:9.4.57.v20241219"))
134+
include(dependency("org.eclipse.jetty:.*:12.1.5"))
135135
include(dependency("javax.servlet:javax.servlet-api:3.1.0"))
136136
}
137137
relocate("org.eclipse.jetty", getWorkerRelocatedPath("org.eclipse.jetty"))
@@ -200,8 +200,8 @@ dependencies {
200200
compileOnly "org.conscrypt:conscrypt-openjdk-uber:2.5.1"
201201

202202
implementation "javax.servlet:javax.servlet-api:3.1.0"
203-
implementation "org.eclipse.jetty:jetty-server:9.4.57.v20241219"
204-
implementation "org.eclipse.jetty:jetty-servlet:9.4.57.v20241219"
203+
implementation "org.eclipse.jetty:jetty-server:12.1.5"
204+
implementation "org.eclipse.jetty.ee10:jetty-ee10-servlet:12.1.5"
205205
implementation library.java.avro
206206
implementation library.java.jackson_annotations
207207
implementation library.java.jackson_core

0 commit comments

Comments
 (0)