5.13.1 hotfix release (#2129)

raikbitters · web-flow · commit 54dce531c30b · 2024-12-17T14:21:15.000+01:00
diff --git a/build.gradle b/build.gradle
@@ -116,6 +116,8 @@ dependencies {
     }
     implementation 'xerces:xercesImpl:2.12.2'
     implementation 'com.lowagie:itext:4.2.2'
+    // Fix CVE-2021-43113 in com.lowagie:itext:4.2.2
+    implementation 'com.itextpdf:itextpdf:5.5.13.4'
     // Fix CVE-2020-15522 in com.lowagie:itext:2.1.7.js7
     implementation 'org.bouncycastle:bcprov-jdk15on:1.70'
     // JasperReport's export to XLS uses Apache POI

Original file line number	Diff line number	Diff line change
`@@ -116,6 +116,8 @@ dependencies {`
`116`	`116`	`}`
`117`	`117`	`implementation 'xerces:xercesImpl:2.12.2'`
`118`	`118`	`implementation 'com.lowagie:itext:4.2.2'`
	`119`	`+ // Fix CVE-2021-43113 in com.lowagie:itext:4.2.2`
	`120`	`+ implementation 'com.itextpdf:itextpdf:5.5.13.4'`
`119`	`121`	`// Fix CVE-2020-15522 in com.lowagie:itext:2.1.7.js7`
`120`	`122`	`implementation 'org.bouncycastle:bcprov-jdk15on:1.70'`
`121`	`123`	`// JasperReport's export to XLS uses Apache POI`