Merge pull request #25 from US-ELRR/cve_update

cve update
US-ELRR · Apr 15, 2024 · b5c07d6 · b5c07d6
2 parents cd7c711 + ea1e1b0
commit b5c07d6
Show file tree

Hide file tree

Showing 50 changed files with 42 additions and 36 deletions.
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/classpath.idx b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/classpath.idx
@@ -10,12 +10,12 @@
 - "BOOT-INF/lib/jul-to-slf4j-2.0.9.jar"
 - "BOOT-INF/lib/jakarta.annotation-api-2.1.1.jar"
 - "BOOT-INF/lib/spring-aop-6.0.14.jar"
-- "BOOT-INF/lib/spring-security-config-6.1.4.jar"
-- "BOOT-INF/lib/spring-security-web-6.1.4.jar"
+- "BOOT-INF/lib/spring-security-config-6.2.3.jar"
+- "BOOT-INF/lib/spring-security-web-6.2.3.jar"
 - "BOOT-INF/lib/spring-expression-6.0.14.jar"
 - "BOOT-INF/lib/confusable-homoglyphs-1.1.1.jar"
 - "BOOT-INF/lib/annotations-23.0.0.jar"
-- "BOOT-INF/lib/json-20210307.jar"
+- "BOOT-INF/lib/json-20240303.jar"
 - "BOOT-INF/lib/commons-validator-1.7.jar"
 - "BOOT-INF/lib/commons-beanutils-1.9.4.jar"
 - "BOOT-INF/lib/commons-digester-2.1.jar"
@@ -26,39 +26,38 @@
 - "BOOT-INF/lib/jackson-module-parameter-names-2.15.3.jar"
 - "BOOT-INF/lib/tomcat-embed-websocket-10.1.16.jar"
 - "BOOT-INF/lib/spring-webmvc-6.0.14.jar"
-- "BOOT-INF/lib/spring-security-saml2-service-provider-6.1.4.jar"
-- "BOOT-INF/lib/opensaml-core-4.1.1.jar"
+- "BOOT-INF/lib/spring-security-saml2-service-provider-6.2.3.jar"
+- "BOOT-INF/lib/opensaml-core-4.3.0.jar"
 - "BOOT-INF/lib/commons-codec-1.15.jar"
-- "BOOT-INF/lib/guava-30.1.1-jre.jar"
+- "BOOT-INF/lib/guava-31.1-jre.jar"
 - "BOOT-INF/lib/failureaccess-1.0.1.jar"
 - "BOOT-INF/lib/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar"
-- "BOOT-INF/lib/error_prone_annotations-2.5.1.jar"
+- "BOOT-INF/lib/error_prone_annotations-2.11.0.jar"
 - "BOOT-INF/lib/j2objc-annotations-1.3.jar"
 - "BOOT-INF/lib/metrics-core-4.2.22.jar"
-- "BOOT-INF/lib/java-support-8.2.1.jar"
-- "BOOT-INF/lib/opensaml-saml-api-4.1.1.jar"
-- "BOOT-INF/lib/opensaml-messaging-api-4.1.1.jar"
-- "BOOT-INF/lib/opensaml-profile-api-4.1.1.jar"
-- "BOOT-INF/lib/opensaml-security-api-4.1.1.jar"
-- "BOOT-INF/lib/cryptacular-1.2.4.jar"
-- "BOOT-INF/lib/bcprov-jdk15on-1.68.jar"
-- "BOOT-INF/lib/bcpkix-jdk15on-1.68.jar"
-- "BOOT-INF/lib/opensaml-soap-api-4.1.1.jar"
-- "BOOT-INF/lib/opensaml-xmlsec-api-4.1.1.jar"
-- "BOOT-INF/lib/xmlsec-2.1.6.jar"
-- "BOOT-INF/lib/woodstox-core-5.0.3.jar"
-- "BOOT-INF/lib/stax2-api-3.1.4.jar"
-- "BOOT-INF/lib/opensaml-saml-impl-4.1.1.jar"
-- "BOOT-INF/lib/opensaml-security-impl-4.1.1.jar"
-- "BOOT-INF/lib/opensaml-soap-impl-4.1.1.jar"
-- "BOOT-INF/lib/opensaml-storage-api-4.1.1.jar"
-- "BOOT-INF/lib/opensaml-xmlsec-impl-4.1.1.jar"
+- "BOOT-INF/lib/java-support-8.4.0.jar"
+- "BOOT-INF/lib/opensaml-saml-api-4.3.0.jar"
+- "BOOT-INF/lib/opensaml-messaging-api-4.3.0.jar"
+- "BOOT-INF/lib/opensaml-profile-api-4.3.0.jar"
+- "BOOT-INF/lib/opensaml-security-api-4.3.0.jar"
+- "BOOT-INF/lib/cryptacular-1.2.5.jar"
+- "BOOT-INF/lib/bcprov-jdk18on-1.72.jar"
+- "BOOT-INF/lib/bcpkix-jdk18on-1.72.jar"
+- "BOOT-INF/lib/bcutil-jdk18on-1.72.jar"
+- "BOOT-INF/lib/opensaml-soap-api-4.3.0.jar"
+- "BOOT-INF/lib/opensaml-xmlsec-api-4.3.0.jar"
+- "BOOT-INF/lib/xmlsec-2.3.2.jar"
+- "BOOT-INF/lib/opensaml-saml-impl-4.3.0.jar"
+- "BOOT-INF/lib/opensaml-security-impl-4.3.0.jar"
+- "BOOT-INF/lib/opensaml-soap-impl-4.3.0.jar"
+- "BOOT-INF/lib/opensaml-storage-api-4.3.0.jar"
+- "BOOT-INF/lib/opensaml-xmlsec-impl-4.3.0.jar"
 - "BOOT-INF/lib/velocity-engine-core-2.3.jar"
 - "BOOT-INF/lib/commons-lang3-3.12.0.jar"
-- "BOOT-INF/lib/httpclient-4.5.13.jar"
+- "BOOT-INF/lib/httpclient-4.5.14.jar"
 - "BOOT-INF/lib/httpcore-4.4.16.jar"
-- "BOOT-INF/lib/spring-security-core-6.1.4.jar"
-- "BOOT-INF/lib/spring-security-crypto-6.1.4.jar"
+- "BOOT-INF/lib/spring-security-core-6.2.3.jar"
+- "BOOT-INF/lib/spring-security-crypto-6.2.3.jar"
 - "BOOT-INF/lib/spring-test-6.0.14.jar"
 - "BOOT-INF/lib/spring-kafka-3.0.13.jar"
 - "BOOT-INF/lib/spring-context-6.0.14.jar"
@@ -92,8 +91,8 @@
 - "BOOT-INF/lib/hibernate-validator-8.0.1.Final.jar"
 - "BOOT-INF/lib/jakarta.validation-api-3.0.2.jar"
 - "BOOT-INF/lib/lombok-1.18.30.jar"
-- "BOOT-INF/lib/postgresql-42.5.1.jar"
-- "BOOT-INF/lib/checker-qual-3.5.0.jar"
+- "BOOT-INF/lib/postgresql-42.7.3.jar"
+- "BOOT-INF/lib/checker-qual-3.42.0.jar"
 - "BOOT-INF/lib/jasypt-spring-boot-starter-3.0.4.jar"
 - "BOOT-INF/lib/jasypt-spring-boot-3.0.4.jar"
 - "BOOT-INF/lib/jasypt-1.9.3.jar"
@@ -130,13 +129,15 @@
 - "BOOT-INF/lib/zstd-jni-1.5.2-1.jar"
 - "BOOT-INF/lib/lz4-java-1.8.0.jar"
 - "BOOT-INF/lib/slf4j-api-2.0.9.jar"
-- "BOOT-INF/lib/json-path-2.8.0.jar"
+- "BOOT-INF/lib/json-path-2.9.0.jar"
 - "BOOT-INF/lib/json-smart-2.4.11.jar"
+- "BOOT-INF/lib/accessors-smart-2.4.11.jar"
+- "BOOT-INF/lib/asm-9.3.jar"
 - "BOOT-INF/lib/snappy-java-1.1.10.4.jar"
 - "BOOT-INF/lib/snakeyaml-2.0.jar"
 - "BOOT-INF/lib/spring-core-6.1.5.jar"
 - "BOOT-INF/lib/spring-jcl-6.0.14.jar"
-- "BOOT-INF/lib/spring-web-6.0.14.jar"
+- "BOOT-INF/lib/spring-web-6.1.5.jar"
 - "BOOT-INF/lib/spring-beans-6.0.14.jar"
 - "BOOT-INF/lib/tomcat-embed-core-11.0.0-M18.jar"
 - "BOOT-INF/lib/tomcat-annotations-api-10.1.16.jar"

diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/accessors-smart-2.4.11.jar b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/accessors-smart-2.4.11.jar
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/asm-9.3.jar b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/asm-9.3.jar
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/bcpkix-jdk15on-1.68.jar b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/bcpkix-jdk15on-1.68.jar
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/bcpkix-jdk18on-1.72.jar b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/bcpkix-jdk18on-1.72.jar
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/bcprov-jdk15on-1.68.jar b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/bcprov-jdk15on-1.68.jar
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/bcprov-jdk18on-1.72.jar b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/bcprov-jdk18on-1.72.jar
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/bcutil-jdk18on-1.72.jar b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/bcutil-jdk18on-1.72.jar
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/checker-qual-3.42.0.jar b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/checker-qual-3.42.0.jar
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/checker-qual-3.5.0.jar b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/checker-qual-3.5.0.jar
diff --git a/...APSHOT/BOOT-INF/lib/cryptacular-1.2.4.jar → ...APSHOT/BOOT-INF/lib/cryptacular-1.2.5.jar b/...APSHOT/BOOT-INF/lib/cryptacular-1.2.4.jar → ...APSHOT/BOOT-INF/lib/cryptacular-1.2.5.jar
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/error_prone_annotations-2.11.0.jar b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/error_prone_annotations-2.11.0.jar
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/error_prone_annotations-2.5.1.jar b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/error_prone_annotations-2.5.1.jar
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/guava-30.1.1-jre.jar b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/guava-30.1.1-jre.jar
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/guava-31.1-jre.jar b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/guava-31.1-jre.jar
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/httpclient-4.5.13.jar b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/httpclient-4.5.13.jar
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/httpclient-4.5.14.jar b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/httpclient-4.5.14.jar
diff --git a/...PSHOT/BOOT-INF/lib/java-support-8.2.1.jar → ...PSHOT/BOOT-INF/lib/java-support-8.4.0.jar b/...PSHOT/BOOT-INF/lib/java-support-8.2.1.jar → ...PSHOT/BOOT-INF/lib/java-support-8.4.0.jar
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/json-20210307.jar b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/json-20210307.jar
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/json-20240303.jar b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/json-20240303.jar
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/json-path-2.8.0.jar b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/json-path-2.8.0.jar
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/json-path-2.9.0.jar b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/json-path-2.9.0.jar
diff --git a/...SHOT/BOOT-INF/lib/opensaml-core-4.1.1.jar → ...SHOT/BOOT-INF/lib/opensaml-core-4.3.0.jar b/...SHOT/BOOT-INF/lib/opensaml-core-4.1.1.jar → ...SHOT/BOOT-INF/lib/opensaml-core-4.3.0.jar
diff --git a/...-INF/lib/opensaml-messaging-api-4.1.1.jar → ...-INF/lib/opensaml-messaging-api-4.3.0.jar b/...-INF/lib/opensaml-messaging-api-4.1.1.jar → ...-INF/lib/opensaml-messaging-api-4.3.0.jar
diff --git a/...OT-INF/lib/opensaml-profile-api-4.1.1.jar → ...OT-INF/lib/opensaml-profile-api-4.3.0.jar b/...OT-INF/lib/opensaml-profile-api-4.1.1.jar → ...OT-INF/lib/opensaml-profile-api-4.3.0.jar
diff --git a/.../BOOT-INF/lib/opensaml-saml-api-4.1.1.jar → .../BOOT-INF/lib/opensaml-saml-api-4.3.0.jar b/.../BOOT-INF/lib/opensaml-saml-api-4.1.1.jar → .../BOOT-INF/lib/opensaml-saml-api-4.3.0.jar
diff --git a/...BOOT-INF/lib/opensaml-saml-impl-4.1.1.jar → ...BOOT-INF/lib/opensaml-saml-impl-4.3.0.jar b/...BOOT-INF/lib/opensaml-saml-impl-4.1.1.jar → ...BOOT-INF/lib/opensaml-saml-impl-4.3.0.jar
diff --git a/...T-INF/lib/opensaml-security-api-4.1.1.jar → ...T-INF/lib/opensaml-security-api-4.3.0.jar b/...T-INF/lib/opensaml-security-api-4.1.1.jar → ...T-INF/lib/opensaml-security-api-4.3.0.jar
diff --git a/...-INF/lib/opensaml-security-impl-4.1.1.jar → ...-INF/lib/opensaml-security-impl-4.3.0.jar b/...-INF/lib/opensaml-security-impl-4.1.1.jar → ...-INF/lib/opensaml-security-impl-4.3.0.jar
diff --git a/.../BOOT-INF/lib/opensaml-soap-api-4.1.1.jar → .../BOOT-INF/lib/opensaml-soap-api-4.3.0.jar b/.../BOOT-INF/lib/opensaml-soap-api-4.1.1.jar → .../BOOT-INF/lib/opensaml-soap-api-4.3.0.jar
diff --git a/...BOOT-INF/lib/opensaml-soap-impl-4.1.1.jar → ...BOOT-INF/lib/opensaml-soap-impl-4.3.0.jar b/...BOOT-INF/lib/opensaml-soap-impl-4.1.1.jar → ...BOOT-INF/lib/opensaml-soap-impl-4.3.0.jar
diff --git a/...OT-INF/lib/opensaml-storage-api-4.1.1.jar → ...OT-INF/lib/opensaml-storage-api-4.3.0.jar b/...OT-INF/lib/opensaml-storage-api-4.1.1.jar → ...OT-INF/lib/opensaml-storage-api-4.3.0.jar
diff --git a/...OOT-INF/lib/opensaml-xmlsec-api-4.1.1.jar → ...OOT-INF/lib/opensaml-xmlsec-api-4.3.0.jar b/...OOT-INF/lib/opensaml-xmlsec-api-4.1.1.jar → ...OOT-INF/lib/opensaml-xmlsec-api-4.3.0.jar
diff --git a/...OT-INF/lib/opensaml-xmlsec-impl-4.1.1.jar → ...OT-INF/lib/opensaml-xmlsec-impl-4.3.0.jar b/...OT-INF/lib/opensaml-xmlsec-impl-4.1.1.jar → ...OT-INF/lib/opensaml-xmlsec-impl-4.3.0.jar
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/postgresql-42.5.1.jar b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/postgresql-42.5.1.jar
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/postgresql-42.7.3.jar b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/postgresql-42.7.3.jar
diff --git a/...-INF/lib/spring-security-config-6.1.4.jar → ...-INF/lib/spring-security-config-6.2.3.jar b/...-INF/lib/spring-security-config-6.1.4.jar → ...-INF/lib/spring-security-config-6.2.3.jar
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/spring-security-core-6.1.4.jar b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/spring-security-core-6.1.4.jar
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/spring-security-core-6.2.3.jar b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/spring-security-core-6.2.3.jar
diff --git a/...-INF/lib/spring-security-crypto-6.1.4.jar → ...-INF/lib/spring-security-crypto-6.2.3.jar b/...-INF/lib/spring-security-crypto-6.1.4.jar → ...-INF/lib/spring-security-crypto-6.2.3.jar
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/spring-security-saml2-service-provider-6.1.4.jar b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/spring-security-saml2-service-provider-6.1.4.jar
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/spring-security-saml2-service-provider-6.2.3.jar b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/spring-security-saml2-service-provider-6.2.3.jar
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/spring-security-web-6.1.4.jar b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/spring-security-web-6.1.4.jar
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/spring-security-web-6.2.3.jar b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/spring-security-web-6.2.3.jar
diff --git a/...APSHOT/BOOT-INF/lib/spring-web-6.0.14.jar → ...NAPSHOT/BOOT-INF/lib/spring-web-6.1.5.jar b/...APSHOT/BOOT-INF/lib/spring-web-6.0.14.jar → ...NAPSHOT/BOOT-INF/lib/spring-web-6.1.5.jar
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/stax2-api-3.1.4.jar b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/stax2-api-3.1.4.jar
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/woodstox-core-5.0.3.jar b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/woodstox-core-5.0.3.jar
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/xmlsec-2.1.6.jar b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/xmlsec-2.1.6.jar
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/xmlsec-2.3.2.jar b/elrrdatasync-0.0.1-SNAPSHOT/BOOT-INF/lib/xmlsec-2.3.2.jar
diff --git a/elrrdatasync-0.0.1-SNAPSHOT/META-INF/maven/com.deloitte.elrr/elrrdatasync/pom.xml b/elrrdatasync-0.0.1-SNAPSHOT/META-INF/maven/com.deloitte.elrr/elrrdatasync/pom.xml
@@ -23,7 +23,7 @@
 		<sonar.dynamicAnalysis>resuseReports</sonar.dynamicAnalysis>
 		<sonar.jacoco.reportPath>${project.basedir}/../target/jacoco.exec</sonar.jacoco.reportPath>
 		<sona.lauguage>java</sona.lauguage>
-		<spring-security.version>6.1.4</spring-security.version>
+		<spring-security.version>6.2.3</spring-security.version>
 	</properties>
 	<dependencies>
 		<dependency>
@@ -60,7 +60,7 @@
 		<dependency>
 			<groupId>org.json</groupId>
 			<artifactId>json</artifactId>
-			<version>20210307</version>
+			<version>20240303</version>
 			<scope>compile</scope>
 		</dependency>
 		<dependency>
@@ -158,7 +158,7 @@
 		<dependency>
 			<groupId>org.postgresql</groupId>
 			<artifactId>postgresql</artifactId>
-			<version>42.5.1</version>				
+			<version>42.7.3</version>				
 			<scope>runtime</scope>
 		</dependency>
 		<dependency>
@@ -277,13 +277,18 @@
 		<dependency>
 			<groupId>org.springframework</groupId>
 			<artifactId>spring-web</artifactId>
-			<version>6.0.14</version>				
+			<version>6.1.5</version>				
 		</dependency>
 		<dependency>
     		<groupId>org.apache.tomcat.embed</groupId>
     		<artifactId>tomcat-embed-core</artifactId>
     		<version>11.0.0-M18</version>
 		</dependency>
+		<dependency>
+    		<groupId>com.jayway.jsonpath</groupId>
+    		<artifactId>json-path</artifactId>
+    		<version>2.9.0</version>
+		</dependency>
 		<dependency>
 			<groupId>ch.qos.logback</groupId>
 			<artifactId>logback-core</artifactId>