CCD-5158 Fix CVE-2023-46589 (#608)

* CCD-5158 Upgrade Tomcat to fix CVE * Update dependency-check-suppressions.xml --------- Co-authored-by: RebeccaBaker <38425793+RebeccaBaker@users.noreply.github.com>
hmcts · Oct 3, 2024 · 6908ed0 · 6908ed0
1 parent 0bd66a6
commit 6908ed0
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 6 deletions.
diff --git a/build.gradle b/build.gradle
@@ -149,7 +149,7 @@ dependencyManagement {
         mavenBom "org.springframework.cloud:spring-cloud-dependencies:${springCloudVersion}"
     }
     dependencies {
-        dependencySet(group: 'org.apache.tomcat.embed', version: '10.1.13') {
+        dependencySet(group: 'org.apache.tomcat.embed', version: '10.1.26') {
             entry 'tomcat-embed-core'
             entry 'tomcat-embed-el'
             entry 'tomcat-embed-websocket'

diff --git a/dependency-check-suppressions.xml b/dependency-check-suppressions.xml
@@ -2,14 +2,13 @@
   <suppress>
     <notes>Temporary Suppression
         CVE-2023-34055 refer [Ticket]
-        CVE-2023-44487 refer [Ticket]
-        CVE-2023-46589 refer [Ticket]
         CVE-2023-42795 refer [Ticket]
-        CVE-2023-45648 refer [Ticket]</notes>
+        CVE-2023-44487 refer [Ticket]
+        CVE-2023-45648 refer [Ticket]
+    </notes>
     <cve>CVE-2023-34055</cve>
-    <cve>CVE-2023-44487</cve>
-    <cve>CVE-2023-46589</cve>
     <cve>CVE-2023-42795</cve>
+    <cve>CVE-2023-44487</cve>
     <cve>CVE-2023-45648</cve>
   </suppress>
 </suppressions>