From 61fcd9244069a38ffed8b573610bd59dbed6dece Mon Sep 17 00:00:00 2001
From: Jan Fretheim <jan.fretheim@digdir.no>
Date: Fri, 16 Jun 2023 11:35:08 +0200
Subject: [PATCH] GH-218: address CVE-2023-34455

---
 .idea/encodings.xml | 2 --
 pom.xml             | 8 +++++++-
 2 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/.idea/encodings.xml b/.idea/encodings.xml
index ec51e76..ee46050 100644
--- a/.idea/encodings.xml
+++ b/.idea/encodings.xml
@@ -5,7 +5,5 @@
     <file url="file://$PROJECT_DIR$/log-event-spring-boot-starter/src/main/resources" charset="UTF-8" />
     <file url="file://$PROJECT_DIR$/log-event/src/main/java" charset="UTF-8" />
     <file url="file://$PROJECT_DIR$/log-event/src/main/resources" charset="UTF-8" />
-    <file url="file://$PROJECT_DIR$/src/main/java" charset="UTF-8" />
-    <file url="file://$PROJECT_DIR$/src/main/resources" charset="UTF-8" />
   </component>
 </project>
\ No newline at end of file
diff --git a/pom.xml b/pom.xml
index 087a77e..72c75d6 100644
--- a/pom.xml
+++ b/pom.xml
@@ -29,7 +29,7 @@
         <maven-failsafe-plugin.version>3.1.2</maven-failsafe-plugin.version>
         <maven-surefire-plugin.version>3.1.2</maven-surefire-plugin.version>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
-        <kafka.version>3.4.1</kafka.version>
+        <kafka.version>3.5.0</kafka.version>
         <confluent.version>7.4.0</confluent.version>
         <kafka.scala.version>2.13</kafka.scala.version>
         <curator.version>5.5.0</curator.version>
@@ -42,6 +42,7 @@
         <slf4j.version>2.0.7</slf4j.version>
         <archunit.version>0.23.1</archunit.version>
         <spring.boot.version>2.7.10</spring.boot.version>
+        <snappy.version>1.1.10.1</snappy.version> <!-- CVE-2023-34455 -->
     </properties>
 
     <dependencyManagement>
@@ -143,6 +144,11 @@
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>
+            <dependency> <!-- CVE-2023-34455 -->
+                <groupId>org.xerial.snappy</groupId>
+                <artifactId>snappy-java</artifactId>
+                <version>${snappy.version}</version>
+            </dependency>
 
         </dependencies>
     </dependencyManagement>