Bump up commons-compress to 1.26.0 to fix CVE

Signed-off-by: Aman Khare <amkhar@amazon.com>
Gaurav614 · Mar 12, 2024 · c28d0d7 · c28d0d7
1 parent afd3969
commit c28d0d7
Show file tree

Hide file tree

Showing 8 changed files with 5 additions and 5 deletions.
diff --git a/buildSrc/build.gradle b/buildSrc/build.gradle
@@ -103,7 +103,7 @@ dependencies {
   api localGroovy()
 
   api 'commons-codec:commons-codec:1.16.0'
-  api 'org.apache.commons:commons-compress:1.25.0'
+  api "org.apache.commons:commons-compress:${props.getProperty('commonscompress')}"
   api 'org.apache.ant:ant:1.10.14'
   api 'com.netflix.nebula:gradle-extra-configurations-plugin:10.0.0'
   api 'com.netflix.nebula:nebula-publishing-plugin:21.0.0'

diff --git a/buildSrc/version.properties b/buildSrc/version.properties
@@ -42,7 +42,7 @@ httpasyncclient   = 4.1.5
 commonslogging    = 1.2
 commonscodec      = 1.15
 commonslang       = 3.13.0
-commonscompress   = 1.24.0
+commonscompress   = 1.26.0
 # plugin dependencies
 aws               = 2.20.55
 reactivestreams   = 1.0.4

diff --git a/distribution/tools/plugin-cli/licenses/commons-compress-1.24.0.jar.sha1 b/distribution/tools/plugin-cli/licenses/commons-compress-1.24.0.jar.sha1
diff --git a/distribution/tools/plugin-cli/licenses/commons-compress-1.26.0.jar.sha1 b/distribution/tools/plugin-cli/licenses/commons-compress-1.26.0.jar.sha1
@@ -0,0 +1 @@
+659feffdd12280201c8aacb8f7be94f9a883c824
diff --git a/plugins/ingest-attachment/licenses/commons-compress-1.24.0.jar.sha1 b/plugins/ingest-attachment/licenses/commons-compress-1.24.0.jar.sha1
diff --git a/plugins/ingest-attachment/licenses/commons-compress-1.26.0.jar.sha1 b/plugins/ingest-attachment/licenses/commons-compress-1.26.0.jar.sha1
@@ -0,0 +1 @@
+659feffdd12280201c8aacb8f7be94f9a883c824
diff --git a/plugins/repository-hdfs/licenses/commons-compress-1.24.0.jar.sha1 b/plugins/repository-hdfs/licenses/commons-compress-1.24.0.jar.sha1
diff --git a/plugins/repository-hdfs/licenses/commons-compress-1.26.0.jar.sha1 b/plugins/repository-hdfs/licenses/commons-compress-1.26.0.jar.sha1
@@ -0,0 +1 @@
+659feffdd12280201c8aacb8f7be94f9a883c824