commons-compress update

th2-net · Jul 12, 2024 · f5f9207 · f5f9207
1 parent d8b364d
commit f5f9207
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/build.gradle b/build.gradle
@@ -172,6 +172,18 @@ dependencies {
     testFixturesImplementation "org.junit.jupiter:junit-jupiter:$junitVersion"
 }
 
+// substitute commons-compress:1.24.0 from testcontainers:1.19.8 to version 1.26.2
+// because commons-compress:1.24.0 contains vulnerabilities (CVE-2024-25710, CVE-2024-26308)
+configurations {
+    configureEach {
+        resolutionStrategy {
+            dependencySubstitution {
+                substitute module('org.apache.commons:commons-compress') using module('org.apache.commons:commons-compress:1.26.2')
+            }
+        }
+    }
+}
+
 sourceSets {
     main.kotlin.srcDirs += "src/main/kotlin"
     test.resources.srcDirs += "$genBaseDir/test/services/java/resources"