Updated h2 and CVE exemptions to 2.2.224 (#59)

* Updated h2 and CVE exemptions to 2.2.224 * Upgrade other H2 references to 2.2.224
finos · Nov 19, 2023 · dec114f · dec114f
1 parent ab70064
commit dec114f
Show file tree

Hide file tree

Showing 6 changed files with 7 additions and 8 deletions.
diff --git a/.github/gradle-cve-ignore-list.xml b/.github/gradle-cve-ignore-list.xml
@@ -2,12 +2,12 @@
 <suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
     <suppress>
         <notes><![CDATA[Not using webAdminPassword startup parameter]]></notes>
-        <filePath regex="true">.*\bh2-2\.2\.220\.jar</filePath>
+        <filePath regex="true">.*\bh2-2\.2\.224\.jar</filePath>
         <cve>CVE-2022-45868</cve>
     </suppress>
     <suppress>
         <notes><![CDATA[Not running backups]]></notes>
-        <filePath regex="true">.*\bh2-2\.2\.220\.jar</filePath>
+        <filePath regex="true">.*\bh2-2\.2\.224\.jar</filePath>
         <cve>CVE-2018-14335</cve>
     </suppress>
     <suppress>

diff --git a/account-service/build.gradle b/account-service/build.gradle
@@ -35,7 +35,7 @@ dependencies {
 	implementation('org.apache.tomcat.embed:tomcat-embed-el:10.1.16') {
 		because 'previous versions are affected by CVE-2023-41080 and others'
 	}
-	implementation 'com.h2database:h2:2.2.220'
+	implementation 'com.h2database:h2:2.2.224'
 	implementation 'org.springdoc:springdoc-openapi-ui:1.7.0'
 
 	testImplementation 'org.springframework.boot:spring-boot-starter-test'

diff --git a/database/build.gradle b/database/build.gradle
@@ -12,8 +12,7 @@ plugins {
 }
 
 dependencies {
-   implementation 'com.h2database:h2:2.2.220'
-//    implementation 'com.h2database:h2:2.2.220'
+   implementation 'com.h2database:h2:2.2.224'
 }
 
 application {

diff --git a/position-service/build.gradle b/position-service/build.gradle
@@ -35,7 +35,7 @@ dependencies {
 	implementation('org.apache.tomcat.embed:tomcat-embed-el:10.1.16') {
 		because 'previous versions are affected by CVE-2023-41080 and others'
 	}
-	implementation 'com.h2database:h2:2.2.220'
+	implementation 'com.h2database:h2:2.2.224'
 	implementation 'org.springdoc:springdoc-openapi-ui:1.7.0'
 
 	testImplementation 'org.springframework.boot:spring-boot-starter-test'

diff --git a/trade-processor/build.gradle b/trade-processor/build.gradle
@@ -38,7 +38,7 @@ dependencies {
 	implementation('org.json:json:20231013') {
 		because 'previous versions are affected by multiple CVE'
 	}
-	implementation 'com.h2database:h2:2.2.220'
+	implementation 'com.h2database:h2:2.2.224'
 	implementation 'org.springdoc:springdoc-openapi-ui:1.7.0'
 	implementation ('io.socket:socket.io-client:2.1.0'){
 		exclude group: 'org.json', module: 'json'

diff --git a/trade-service/build.gradle b/trade-service/build.gradle
@@ -41,7 +41,7 @@ dependencies {
 	implementation ('io.socket:socket.io-client:2.1.0') {
 		exclude group: 'org.json', module: 'json'
 	}
-	implementation 'com.h2database:h2:2.2.220'
+	implementation 'com.h2database:h2:2.2.224'
 	implementation 'org.springdoc:springdoc-openapi-ui:1.7.0'
 	implementation 'io.swagger.core.v3:swagger-core:2.2.19'
 	implementation 'io.swagger.core.v3:swagger-annotations:2.2.19'