Update vertx to 4.4.6 (#955)

Consensys · Dec 12, 2023 · 0c95d7f · 0c95d7f
1 parent c4189fd
commit 0c95d7f
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 1 deletion.
diff --git a/gradle/owasp-suppression.xml b/gradle/owasp-suppression.xml
@@ -41,4 +41,11 @@
         <packageUrl regex="true">^pkg:maven/io\.grpc/grpc\-.*$</packageUrl>
         <cve>CVE-2023-44487</cve>
     </suppress>
+    <suppress until="2024-01-16">
+        <notes><![CDATA[
+        CVE relates to usage hostname verification when using TLS and doesn't apply as we use Tuweni for this
+        ]]></notes>
+        <packageUrl regex="true">^pkg:maven/io\.vertx/vertx\-core@.*$</packageUrl>
+        <cve>CVE-2023-4586</cve>
+    </suppress>
 </suppressions>
diff --git a/gradle/versions.gradle b/gradle/versions.gradle
@@ -33,7 +33,7 @@ dependencyManagement {
 
     dependency 'info.picocli:picocli:4.6.2'
 
-    dependencySet(group: 'io.vertx', version: '4.4.4') {
+    dependencySet(group: 'io.vertx', version: '4.4.6') {
       entry 'vertx-codegen'
       entry ('vertx-core') {
         exclude group: 'io.netty', name: 'netty-handler'