From bb025f1378622a22bf1fb290c50e2e430e5e8ec2 Mon Sep 17 00:00:00 2001
From: Bruno Oliveira da Silva <bruno@abstractj.com>
Date: Fri, 8 Apr 2022 12:44:32 -0300
Subject: [PATCH] Update wildfly-elytron dependency in the main Quarkus
 distribution (CVE-2021-3642)

Resolves #11196
---
 quarkus/pom.xml         | 1 +
 quarkus/runtime/pom.xml | 1 +
 2 files changed, 2 insertions(+)

diff --git a/quarkus/pom.xml b/quarkus/pom.xml
index 9f1b3eb69f..593f5bf022 100644
--- a/quarkus/pom.xml
+++ b/quarkus/pom.xml
@@ -46,6 +46,7 @@
         <microprofile-metrics-api.version>3.0.1</microprofile-metrics-api.version>
         <wildfly.common.version>1.5.4.Final-format-001</wildfly.common.version>
         <infinispan.version>13.0.8.Final</infinispan.version>
+        <wildfly-elytron.version>1.18.3.Final</wildfly-elytron.version>
 
         <!--
             Java EE dependencies. Not available from JDK 11+.
diff --git a/quarkus/runtime/pom.xml b/quarkus/runtime/pom.xml
index 08d545b4ae..86aec2e57a 100644
--- a/quarkus/runtime/pom.xml
+++ b/quarkus/runtime/pom.xml
@@ -86,6 +86,7 @@
         <dependency>
             <groupId>org.wildfly.security</groupId>
             <artifactId>wildfly-elytron</artifactId>
+            <version>${wildfly-elytron.version}</version>
         </dependency>
         <dependency>
             <groupId>io.quarkiverse.vault</groupId>