Update vertx to 4.4.6 and suppress unrelated CVE (#537)

Consensys · Dec 12, 2023 · e0322b8 · e0322b8
1 parent f625de5
commit e0322b8
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 1 deletion.
diff --git a/gradle/owasp-suppression.xml b/gradle/owasp-suppression.xml
@@ -51,4 +51,11 @@
         <packageUrl regex="true">^pkg:maven/io\.grpc/grpc\-.*$</packageUrl>
         <cve>CVE-2023-44487</cve>
     </suppress>
+    <suppress until="2024-01-16">
+        <notes><![CDATA[
+        CVE relates to usage hostname verification when using TLS and doesn't apply as we use Tuweni for this
+        ]]></notes>
+        <packageUrl regex="true">^pkg:maven/io\.vertx/vertx\-core@.*$</packageUrl>
+        <cve>CVE-2023-4586</cve>
+    </suppress>
 </suppressions>
diff --git a/gradle/versions.gradle b/gradle/versions.gradle
@@ -35,7 +35,7 @@ dependencyManagement {
 
     dependency 'io.rest-assured:rest-assured:4.4.0'
 
-    dependencySet(group: 'io.vertx', version: '4.3.8') {
+    dependencySet(group: 'io.vertx', version: '4.4.6') {
        entry 'vertx-codegen'
        entry 'vertx-core'
        entry 'vertx-unit'