Update vulnerable rabbitmq java client versions

ballerina-platform · Feb 9, 2024 · fe54988 · fe54988
1 parent 0832624
commit fe54988
Show file tree

Hide file tree

Showing 5 changed files with 7 additions and 7 deletions.
diff --git a/distribution/zip/jballerina-tools/LICENSE b/distribution/zip/jballerina-tools/LICENSE
@@ -74,7 +74,7 @@ future-1.1.0.jar
 netty-buffer-4.1.39.Final.jar                                                                       bundle         apache2
 lang.map.jar                                                                                        jar            apache2
 ballerina-xmlutils-1.1.0.jar                                                                        jar            apache2
-amqp-client-5.7.3.jar                                                                               bundle         apache2 + mpl11
+amqp-client-5.20.0.jar                                                                               bundle         apache2 + mpl11
 ballerina-client-generator-1.1.0.jar                                                                jar            apache2
 jnats-2.6.0.jar                                                                                     bundle         apache2
 jackson-core-2.15.2.jar                                                                              bundle         apache2

diff --git a/distribution/zip/jballerina/LICENSE b/distribution/zip/jballerina/LICENSE
@@ -74,7 +74,7 @@ future-1.1.0.jar
 netty-buffer-4.1.39.Final.jar                                                                       bundle         apache2
 lang.map.jar                                                                                        jar            apache2
 ballerina-xmlutils-1.1.0.jar                                                                        jar            apache2
-amqp-client-5.7.3.jar                                                                               bundle         apache2 + mpl11
+amqp-client-5.20.0.jar                                                                               bundle         apache2 + mpl11
 ballerina-client-generator-1.1.0.jar                                                                jar            apache2
 jnats-2.6.0.jar                                                                                     bundle         apache2
 jackson-core-2.15.2.jar                                                                              bundle         apache2

diff --git a/gradle/javaLibsProject.gradle b/gradle/javaLibsProject.gradle
@@ -82,7 +82,7 @@ dependencies {
     dist 'com.sun.mail:javax.mail:1.6.2'
     dist 'org.yaml:snakeyaml:2.0'
     dist 'org.wso2.staxon:staxon-core:1.2.0.wso2v2'
-    dist 'com.rabbitmq:amqp-client:5.7.3'
+    dist 'com.rabbitmq:amqp-client:5.20.0'
     dist 'com.jcraft:jzlib:1.1.3'
     dist 'io.nats:java-nats-streaming:2.2.1'
     dist 'io.nats:jnats:2.6.0'

diff --git a/stdlib/messaging/rabbitmq/build.gradle b/stdlib/messaging/rabbitmq/build.gradle
@@ -42,7 +42,7 @@ dependencies {
 
     interopImports project(':ballerina-time')
 
-    implementation 'com.rabbitmq:amqp-client:5.7.3'
+    implementation 'com.rabbitmq:amqp-client:5.20.0'
 
     baloImplementation project(path: ':ballerina-runtime-api', configuration: 'baloImplementation')
     baloImplementation project(path: ':ballerina-java', configuration: 'baloImplementation')
@@ -56,7 +56,7 @@ dependencies {
     testCompile project(path: ':ballerina-test-utils', configuration: 'shadow')
 
     interopImports project(':ballerina-crypto')
-    interopImports 'com.rabbitmq:amqp-client:5.7.3'
+    interopImports 'com.rabbitmq:amqp-client:5.20.0'
 }
 
 configurations {

diff --git a/stdlib/messaging/rabbitmq/src/main/ballerina/Ballerina.toml b/stdlib/messaging/rabbitmq/src/main/ballerina/Ballerina.toml
@@ -14,7 +14,7 @@ target = "java8"
 
     [[platform.libraries]]
     artifactId = "amqp-client"
-    version = "5.7.3"
-    path = "./lib/amqp-client-5.7.3.jar"
+    version = "5.20.0"
+    path = "./lib/amqp-client-5.20.0.jar"
     groupId = "com.rabbitmq"
     modules = ["rabbitmq"]