Trying to upgrade jetty-http

exasol · Oct 23, 2024 · 042f63c · 042f63c
1 parent 453ec03
commit 042f63c
Show file tree

Hide file tree

Showing 3 changed files with 92 additions and 89 deletions.
diff --git a/dependencies.md b/dependencies.md
diff --git a/doc/changes/changes_1.7.8.md b/doc/changes/changes_1.7.8.md
@@ -28,4 +28,5 @@ Code name:
 * Removed `org.apache.zookeeper:zookeeper:3.9.2`
 * Removed `org.bitbucket.b_c:jose4j:0.9.6`
 * Removed `org.eclipse.jetty.http2:http2-server:9.4.54.v20240208`
+* Added `org.eclipse.jetty:jetty-http:12.0.14`
 * Removed `org.json:json:20240303`
diff --git a/pom.xml b/pom.xml
@@ -224,13 +224,13 @@
 <!--            <version>11.0.24</version>-->
 <!--            <scope>test</scope>-->
 <!--        </dependency>-->
-<!--        <dependency>-->
-<!--            &lt;!&ndash; Upgrade to fix CVE-2024-6763 &ndash;&gt;-->
-<!--            <groupId>org.eclipse.jetty</groupId>-->
-<!--            <artifactId>jetty-http</artifactId>-->
-<!--            <version>12.0.14</version>-->
-<!--            <scope>test</scope>-->
-<!--        </dependency>-->
+        <dependency>
+            <!-- Upgrade to fix CVE-2024-6763 -->
+            <groupId>org.eclipse.jetty</groupId>
+            <artifactId>jetty-http</artifactId>
+            <version>12.0.14</version>
+            <scope>test</scope>
+        </dependency>
 <!--        <dependency>-->
 <!--            &lt;!&ndash; Upgrade to fix CVE-2024-6762 and CVE-2024-9823 &ndash;&gt;-->
 <!--            <groupId>org.eclipse.jetty</groupId>-->
@@ -477,7 +477,7 @@
                 <artifactId>ossindex-maven-plugin</artifactId>
                 <configuration>
                     <excludeVulnerabilityIds>
-                        <exclude>CVE-2024-6763</exclude>
+<!--                        <exclude>CVE-2024-6763</exclude>-->
                         <exclude>CVE-2023-36479</exclude>
                         <exclude>CVE-2024-8184</exclude>
                     </excludeVulnerabilityIds>