CORE-17117: Update version of commons-compress to address CVE-2023-…

…42503, part 2 (#1283) Ensure that even the plugins will be using most up-to-date version.
corda · Oct 9, 2023 · 397b29e · 397b29e
1 parent 931648d
commit 397b29e
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/data/avro-schema/build.gradle b/data/avro-schema/build.gradle
@@ -27,6 +27,13 @@ dependencies {
     compileOnly 'org.osgi:osgi.annotation'
 }
 
+configurations.all {
+    resolutionStrategy {
+        // CVE-2023-42503, current version of Avro uses an outdated version
+        force "org.apache.commons:commons-compress:$commonsCompressVersion"
+    }
+}
+
 description 'Data Model Definitions'
 
 def generatedAvroDir = layout.buildDirectory.dir('generated-avro')