Merge pull request #701 from hmcts/CCD-5159

CCD-5159:
hmcts · Aug 29, 2024 · d85cf81 · d85cf81
2 parents e163fd9 + 944f43b
commit d85cf81
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 4 deletions.
diff --git a/build.gradle b/build.gradle
@@ -308,8 +308,8 @@ dependencies {
   implementation "org.apache.tomcat.embed:tomcat-embed-websocket:${versions.tomcatEmbedded}"
 
   //CVE-2021-42500
-  implementation group: 'ch.qos.logback', name: 'logback-classic', version: '1.2.10'
-  implementation group: 'ch.qos.logback', name: 'logback-core', version: '1.2.10'
+  implementation group: 'ch.qos.logback', name: 'logback-classic', version: '1.2.13'
+  implementation group: 'ch.qos.logback', name: 'logback-core', version: '1.2.13'
 
   // CVE-2021-28170
   implementation group: 'org.glassfish', name: 'jakarta.el', version: '4.0.1'

diff --git a/config/owasp/suppressions.xml b/config/owasp/suppressions.xml
@@ -6,15 +6,13 @@
             CVE-2022-45688 refer [Ticket]
             CVE-2023-5072 refer [Ticket]
             CVE-2023-1370 refer [Ticket]
-            CVE-2023-6378 refer [Ticket]
             CVE-2023-34055 refer [Ticket]
             CVE-2023-20873 refer [Ticket]
             CVE-2023-46589 refer [Ticket]</notes>
     <cve>CVE-2023-35116</cve>
     <cve>CVE-2022-45688</cve>
     <cve>CVE-2023-5072</cve>
     <cve>CVE-2023-1370</cve>
-    <cve>CVE-2023-6378</cve>
     <cve>CVE-2023-34055</cve>
     <cve>CVE-2023-20873</cve>
     <cve>CVE-2023-46589</cve>