diff --git a/CHANGELOG.md b/CHANGELOG.md index e739d02a71c..239432d066a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -30,6 +30,7 @@ - Avoid a cyclic reference while printing EngineExchangeTransitionConfigurationParameter [#4357](https://github.com/hyperledger/besu/pull/4357) - Corrects treating a block as bad on internal error [#4512](https://github.com/hyperledger/besu/issues/4512) - In GraphQL update scalar parsing to be variable friendly [#4522](https://github.com/hyperledger/besu/pull/4522) +- update appache-commons-text to 1.10.0 to address CVE-2022-42889 [#4542](https://github.com/hyperledger/besu/pull/4542) ### Download Links diff --git a/gradle/versions.gradle b/gradle/versions.gradle index 059b35c05b1..24d21b96437 100644 --- a/gradle/versions.gradle +++ b/gradle/versions.gradle @@ -122,7 +122,7 @@ dependencyManagement { dependency 'org.apache.commons:commons-compress:1.21' dependency 'org.apache.commons:commons-lang3:3.12.0' - dependency 'org.apache.commons:commons-text:1.9' + dependency 'org.apache.commons:commons-text:1.10.0' dependency 'org.apache.logging.log4j:log4j-api:2.17.2' dependency 'org.apache.logging.log4j:log4j-core:2.17.2'