From 040ad933554d51ac4050d96af47fa6773b6d29d4 Mon Sep 17 00:00:00 2001 From: Maryan Hratson Date: Fri, 21 Oct 2022 14:47:19 -0400 Subject: [PATCH] bump avro-util: 0.2.81 -> 0.2.118 ## Details [CVE-2022-42889](https://github.com/advisories/GHSA-599f-7c49-w659) in avro-util: > Arbitrary code execution in Apache Commons Text closes https://github.com/linkedin/kafka-monitor/issues/379 ## Testing Done 1. ./gradlew build --- build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.gradle b/build.gradle index 7066ea1f..e78d99d5 100644 --- a/build.gradle +++ b/build.gradle @@ -44,7 +44,7 @@ allprojects { compile group: 'org.apache.kafka', name: 'kafka_2.12', version: '2.8.2' compile group: 'org.apache.kafka', name: 'kafka-clients', version: '2.8.2' compile 'org.apache.commons:commons-lang3:3.12.0' - compile 'com.linkedin.avroutil1:helper-all:0.2.81' + compile 'com.linkedin.avroutil1:helper-all:0.2.118' compile 'org.apache.zookeeper:zookeeper:3.8.0' testCompile 'org.mockito:mockito-core:2.24.0' testCompile 'org.testng:testng:6.8.8'