From f616bb7b3ae330a436051de8b2a91e380254e1f0 Mon Sep 17 00:00:00 2001 From: andy Date: Wed, 21 Sep 2022 10:39:33 +0800 Subject: [PATCH] deps: Change com.google.protobuf:protobuf-java:3.6.1 version to 3.16.1 An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out o...[CVE-2021-22569] --- plugins/cloudopt-next-grpc/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/plugins/cloudopt-next-grpc/build.gradle b/plugins/cloudopt-next-grpc/build.gradle index f2638cd7..c4129fdb 100644 --- a/plugins/cloudopt-next-grpc/build.gradle +++ b/plugins/cloudopt-next-grpc/build.gradle @@ -58,7 +58,7 @@ protobuf { dependencies { api project(":cloudopt-next-web") - api("com.google.protobuf:protobuf-java:3.6.1") + api("com.google.protobuf:protobuf-java:3.16.1") api("io.grpc:grpc-stub:${rootProject.property('grpc_version')}") api("io.grpc:grpc-protobuf:${rootProject.property('grpc_version')}") api("javax.annotation:javax.annotation-api:1.3.1")