arsvendg/Stirling-PDF
1
0
Fork 0
mirror of https://github.com/arsvendg/Stirling-PDF.git synced 2026-07-14 10:34:06 +02:00
Code Issues Actions 4 Packages Projects Releases 1 Wiki Activity

deps: align Bouncy Castle modules to shared version property (#6362)

Browse Source
This commit is contained in:
Ludy
2026-05-20 14:11:43 +01:00
committed by GitHub
parent 2790467241
commit 4c3be4992f
1 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
build.gradle
+5 -5
View File
@@ -24,7 +24,7 @@ ext {
pdfboxVersion = "3.0.7" pdfboxVersion = "3.0.7"
imageioVersion = "3.13.1" imageioVersion = "3.13.1"
lombokVersion = "1.18.46" lombokVersion = "1.18.46"
bouncycastleVersion = "1.83" bouncycastleVersion = "1.84"
springSecuritySamlVersion = "7.0.5" springSecuritySamlVersion = "7.0.5"
openSamlVersion = "5.2.1" openSamlVersion = "5.2.1"
commonmarkVersion = "0.28.0" commonmarkVersion = "0.28.0"
@@ -197,7 +197,6 @@ subprojects {
exclude group: 'org.bouncycastle', module: 'bcutil-jdk15on' exclude group: 'org.bouncycastle', module: 'bcutil-jdk15on'
exclude group: 'org.bouncycastle', module: 'bcmail-jdk15on' exclude group: 'org.bouncycastle', module: 'bcmail-jdk15on'
// Security CVE fixes - hardcoded resolution strategy to ensure safe versions // Security CVE fixes - hardcoded resolution strategy to ensure safe versions
// Primary fixes via explicit dependencies in app/core/build.gradle: // Primary fixes via explicit dependencies in app/core/build.gradle:
// - CVE-2022-25647: gson 2.8.9+ (explicit dependency overrides tabula 2.8.7) // - CVE-2022-25647: gson 2.8.9+ (explicit dependency overrides tabula 2.8.7)
@@ -209,9 +208,10 @@ subprojects {
resolutionStrategy.force 'org.apache.commons:commons-lang3:3.20.0' resolutionStrategy.force 'org.apache.commons:commons-lang3:3.20.0'
// CVE-2024-47554: commons-io 2.21.0 DoS prevention // CVE-2024-47554: commons-io 2.21.0 DoS prevention
resolutionStrategy.force 'commons-io:commons-io:2.21.0' resolutionStrategy.force 'commons-io:commons-io:2.21.0'
// Bouncycastle 1.83 (from bouncycastleVersion variable) // Keep BouncyCastle modules aligned to avoid runtime linkage errors
resolutionStrategy.force 'org.bouncycastle:bcprov-jdk18on:1.83' resolutionStrategy.force "org.bouncycastle:bcprov-jdk18on:${bouncycastleVersion}"
resolutionStrategy.force 'org.bouncycastle:bcpkix-jdk18on:1.83' resolutionStrategy.force "org.bouncycastle:bcpkix-jdk18on:${bouncycastleVersion}"
resolutionStrategy.force "org.bouncycastle:bcutil-jdk18on:${bouncycastleVersion}"
} }
dependencyManagement { dependencyManagement {