How to fix vulnerability CVE-2024-25638, CVE-2010-3700 & CVE-2023-50868 from dnsjava:dnsjava v3.5.2?

dhruvs7 · August 5, 2024, 5:39pm

HI Team !

I have noticed a new vulnerability - CVE-2024-25638, CVE-2010-3700 & CVE-2023-50868 which is reported for dnsjava:dnsjava v3.5.2. This is a transitive dependency of com.couchbase.client:core-io v2.7.1. Will there be a new version of com.couchbase.client:core-io released with dnsjava:dnsjava v3.6.0 ?

mreiche · August 5, 2024, 6:31pm

Yes. A new version to be released this week.

system · November 3, 2024, 6:31pm

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Vulnerabilities in java client sdk for io.netty:netty-all Java SDK java	7	1779	April 8, 2020
How to fix vulnerability CVE-2024-36124 from org.iq80.snappy:snappy? Java SDK java	4	297	October 14, 2024
Couchbase Analytics Service and CVE-2021-44228 Couchbase Server security , analytics	4	2483	December 24, 2021
Couchbase Java SDK 2.0.3 released Java SDK	0	1955	January 8, 2015
ANN: Elasticsearch Connector 4.3.3 & 4.2.13 (fixes Log4j vulnerability) Elasticsearch Connector announcement	3	10125	December 14, 2021

How to fix vulnerability CVE-2024-25638, CVE-2010-3700 & CVE-2023-50868 from dnsjava:dnsjava v3.5.2?

Related topics