From b71d2f3f100e291bc77f47b0b31cfcc581bdceed Mon Sep 17 00:00:00 2001
From: Matthew Whitehead <matthew.whitehead@kaleido.io>
Date: Mon, 23 Sep 2024 11:10:29 +0100
Subject: [PATCH] Update deps for com.google.protobuf CVE

Signed-off-by: Matthew Whitehead <matthew.whitehead@kaleido.io>
---
 gradle/verification-metadata.xml | 28 +++++++++++++++++++++++-----
 gradle/versions.gradle           |  2 ++
 2 files changed, 25 insertions(+), 5 deletions(-)

diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 433772bb817..69bdbfaa837 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -1082,6 +1082,11 @@
             <sha256 value="3b0b372353011f2a7d7b167fe6dd769eb1b90870494f73e4b93654082f85250c" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="com.google.protobuf" name="protobuf-bom" version="3.25.5">
+         <artifact name="protobuf-bom-3.25.5.pom">
+            <sha256 value="080e2984173238b50e064c226afffbb1b0233520295c790a7fd3d6ae4593f063" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="com.google.protobuf" name="protobuf-java" version="3.19.6">
          <artifact name="protobuf-java-3.19.6.jar">
             <sha256 value="6a9a2dff91dcf71f85be71ae971f6164b5a631dcd34bff08f0618535ca44ad02" origin="Generated by Gradle"/>
@@ -1111,6 +1116,14 @@
             <sha256 value="aa40323af7c25a959f38a062d5774385ace5c7098a9ffd610aa7c1f378a094cc" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="com.google.protobuf" name="protobuf-java" version="3.25.5">
+         <artifact name="protobuf-java-3.25.5.jar">
+            <sha256 value="8540247fad9e06baefa8fb45eb313802d019f485f14300e0f9d6b556ed88e753" origin="Generated by Gradle"/>
+         </artifact>
+         <artifact name="protobuf-java-3.25.5.pom">
+            <sha256 value="e752032157a7a39be9be3786684075452a46cd586b2865abd33e707568a4c8af" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="com.google.protobuf" name="protobuf-java-util" version="3.24.0">
          <artifact name="protobuf-java-util-3.24.0.jar">
             <sha256 value="fade64f5f877a1fa6cc4fd308120d72ace7048a2c9bf740298f82f05b9f56843" origin="Generated by Gradle"/>
@@ -1139,6 +1152,11 @@
             <sha256 value="226b7f704a9c865ecf778054f7611f0b2c17c6d8e3b6585d911f07d1255bd398" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="com.google.protobuf" name="protobuf-parent" version="3.25.5">
+         <artifact name="protobuf-parent-3.25.5.pom">
+            <sha256 value="64cc0e3ad6e85f5aec8f9dcf9341d1379e9525364ff53e23e16d8d5824673ef7" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="com.google.re2j" name="re2j" version="1.7">
          <artifact name="re2j-1.7.jar">
             <sha256 value="4f657af51ab8bb0909bcc3eb40862d26125af8cbcf92aaaba595fed77f947bc0" origin="Generated by Gradle"/>
@@ -1496,11 +1514,6 @@
             <sha256 value="8cf15cd4b93ba1b69cdd928d2c485ee05ccaa0044fed0932e8d0dedfbfa6f093" origin="Generated by Gradle"/>
          </artifact>
       </component>
-      <component group="ethereum" name="execution-spec-tests" version="2.1.1">
-         <artifact name="execution-spec-tests-2.1.1-fixtures.tar.gz">
-            <sha256 value="817ca59a93dae2cd6458f015dfbc604d234bcbeca63ffe763bd5b5e27ff3c1a1" origin="Generated by Gradle"/>
-         </artifact>
-      </component>
       <component group="dnsjava" name="dnsjava" version="3.6.0">
          <artifact name="dnsjava-3.6.0.jar">
             <sha256 value="9e07b0f77a885ee0c27109a57d9232db11629cae3d715a926e0bc5d82df67338" origin="Generated by Gradle"/>
@@ -1509,6 +1522,11 @@
             <sha256 value="0a0300c34407a4e3c406e6111f123a64af7a5b0cb2b505295e0f363f87dcefe6" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="ethereum" name="execution-spec-tests" version="2.1.1">
+         <artifact name="execution-spec-tests-2.1.1-fixtures.tar.gz">
+            <sha256 value="817ca59a93dae2cd6458f015dfbc604d234bcbeca63ffe763bd5b5e27ff3c1a1" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="info.picocli" name="picocli" version="3.0.0">
          <artifact name="picocli-3.0.0.jar">
             <sha256 value="22dbbe287dd0ab9d4d519ac9f2dd909537b6daf279ac5962a3bad8c9dae61032" origin="Generated by Gradle"/>
diff --git a/gradle/versions.gradle b/gradle/versions.gradle
index 47f6ec7e71f..b6b368a8349 100644
--- a/gradle/versions.gradle
+++ b/gradle/versions.gradle
@@ -30,6 +30,8 @@ dependencyManagement {
 
     dependency 'com.github.ben-manes.caffeine:caffeine:3.1.8'
 
+    dependency 'com.google.protobuf:protobuf-java:3.25.5'
+
     dependency 'com.github.oshi:oshi-core:6.4.10'
 
     dependency 'com.google.auto.service:auto-service:1.1.1'