Skip to content

Commit

Permalink
Fixed vulnerability CVE-2023-42503 (#24)
Browse files Browse the repository at this point in the history
* Fixed vulnerability CVE-2023-42503
  • Loading branch information
ckunki authored Oct 23, 2023
1 parent 26a563d commit 023ea57
Show file tree
Hide file tree
Showing 18 changed files with 78 additions and 71 deletions.
6 changes: 3 additions & 3 deletions .github/workflows/broken_links_checker.yml

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

6 changes: 3 additions & 3 deletions .github/workflows/ci-build-next-java.yml

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

26 changes: 16 additions & 10 deletions .github/workflows/ci-build.yml

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

8 changes: 4 additions & 4 deletions .github/workflows/dependencies_check.yml

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

14 changes: 9 additions & 5 deletions .github/workflows/release_droid_prepare_original_checksum.yml

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

7 changes: 3 additions & 4 deletions .github/workflows/release_droid_print_quick_checksum.yml

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

3 changes: 3 additions & 0 deletions .gitignore
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,9 @@
.classpath
.project
# .settings : we need Eclipse settings for code formatter and clean-up rules
/.settings/org.eclipse.core.resources.prefs
/.settings/org.eclipse.jdt.apt.core.prefs
/.settings/org.eclipse.m2e.core.prefs
target
.cache
dependency-reduced-pom.xml
Expand Down
3 changes: 3 additions & 0 deletions .project-keeper.yml
Original file line number Diff line number Diff line change
Expand Up @@ -6,3 +6,6 @@ sources:
- integration_tests
linkReplacements:
- https://www.microsoft.com/en-us/sql-server/sql-server-2017|https://www.microsoft.com/en-us/sql-server
excludes:
- "E-PK-CORE-18: Outdated content: '.github/workflows/ci-build.yml'"
- "E-PK-CORE-18: Outdated content: '.github/workflows/release_droid_prepare_original_checksum.yml'"
6 changes: 0 additions & 6 deletions .settings/org.eclipse.core.resources.prefs

This file was deleted.

2 changes: 1 addition & 1 deletion .settings/org.eclipse.jdt.core.prefs

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

4 changes: 0 additions & 4 deletions .settings/org.eclipse.m2e.core.prefs

This file was deleted.

4 changes: 2 additions & 2 deletions dependencies.md

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

29 changes: 16 additions & 13 deletions doc/changes/changes_2.1.1.md
Original file line number Diff line number Diff line change
@@ -1,36 +1,39 @@
# Virtual Schema for SQLServer 2.1.1, released 2023-??-??

Code name:
Code name: Dependency Upgrade on Top of 2.1.0

## Summary

## Features
This release fixes vulnerability CVE-2023-42503 in transitive test dependency to `org.apache.commons:commons-compress` via `exasol-testcontainers` by updating dependencies.

* ISSUE_NUMBER: description
## Security

* #23: Fixed vulnerability CVE-2023-42503 in test dependency `org.apache.commons:commons-compress`

## Dependency Updates

### Compile Dependency Updates

* Updated `com.exasol:virtual-schema-common-jdbc:10.4.0` to `11.0.0`
* Updated `com.exasol:virtual-schema-common-jdbc:10.4.0` to `11.0.2`

### Test Dependency Updates

* Updated `com.exasol:exasol-testcontainers:6.5.1` to `6.6.1`
* Updated `com.exasol:hamcrest-resultset-matcher:1.5.2` to `1.6.0`
* Updated `com.exasol:virtual-schema-common-jdbc:10.4.0` to `11.0.0`
* Updated `org.junit.jupiter:junit-jupiter:5.9.2` to `5.9.3`
* Updated `org.mockito:mockito-junit-jupiter:5.2.0` to `5.4.0`
* Updated `org.testcontainers:junit-jupiter:1.17.6` to `1.18.3`
* Updated `org.testcontainers:mssqlserver:1.17.6` to `1.18.3`
* Updated `com.exasol:exasol-testcontainers:6.5.1` to `6.6.2`
* Updated `com.exasol:hamcrest-resultset-matcher:1.5.2` to `1.6.1`
* Updated `com.exasol:test-db-builder-java:3.4.2` to `3.5.1`
* Updated `com.exasol:virtual-schema-common-jdbc:10.4.0` to `11.0.2`
* Updated `org.junit.jupiter:junit-jupiter:5.9.2` to `5.10.0`
* Updated `org.mockito:mockito-junit-jupiter:5.2.0` to `5.6.0`
* Updated `org.testcontainers:junit-jupiter:1.17.6` to `1.19.1`
* Updated `org.testcontainers:mssqlserver:1.17.6` to `1.19.1`

### Plugin Dependency Updates

* Updated `com.exasol:error-code-crawler-maven-plugin:1.2.2` to `1.3.0`
* Updated `com.exasol:project-keeper-maven-plugin:2.9.3` to `2.9.9`
* Updated `com.exasol:project-keeper-maven-plugin:2.9.3` to `2.9.12`
* Updated `org.apache.maven.plugins:maven-assembly-plugin:3.4.2` to `3.6.0`
* Updated `org.apache.maven.plugins:maven-compiler-plugin:3.10.1` to `3.11.0`
* Updated `org.apache.maven.plugins:maven-enforcer-plugin:3.1.0` to `3.3.0`
* Updated `org.apache.maven.plugins:maven-enforcer-plugin:3.1.0` to `3.4.0`
* Updated `org.apache.maven.plugins:maven-failsafe-plugin:3.0.0-M8` to `3.1.2`
* Updated `org.apache.maven.plugins:maven-surefire-plugin:3.0.0-M8` to `3.1.2`
* Added `org.basepom.maven:duplicate-finder-maven-plugin:2.0.1`
Expand Down
2 changes: 1 addition & 1 deletion doc/user_guide/sqlserver_user_guide.md
Original file line number Diff line number Diff line change
Expand Up @@ -46,7 +46,7 @@ The SQL statement below creates the adapter script, defines the Java class that
```sql
CREATE OR REPLACE JAVA ADAPTER SCRIPT SCHEMA_FOR_VS_SCRIPT.ADAPTER_SCRIPT_SQLSERVER AS
%scriptclass com.exasol.adapter.RequestDispatcher;
%jar /buckets/<BFS service>/<bucket>/virtual-schema-dist-11.0.0-sqlserver-2.1.1.jar;
%jar /buckets/<BFS service>/<bucket>/virtual-schema-dist-11.0.2-sqlserver-2.1.1.jar;
%jar /buckets/<BFS service>/<bucket>/mssql-jdbc-<version>.jre8.jar;
/
```
Expand Down
3 changes: 1 addition & 2 deletions pk_generated_parent.pom

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

16 changes: 8 additions & 8 deletions pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -7,8 +7,8 @@
<description>Abstraction layer that makes an external Microsoft SQL Server database accessible from an Exasol database through regular SQL commands</description>
<url>https://github.com/exasol/sqlserver-virtual-schema/</url>
<properties>
<vscjdbc.version>11.0.0</vscjdbc.version>
<org.testcontainers.version>1.18.3</org.testcontainers.version>
<vscjdbc.version>11.0.2</vscjdbc.version>
<org.testcontainers.version>1.19.1</org.testcontainers.version>
</properties>
<repositories>
<repository>
Expand Down Expand Up @@ -59,20 +59,20 @@
<dependency>
<groupId>org.junit.jupiter</groupId>
<artifactId>junit-jupiter</artifactId>
<version>5.9.3</version>
<version>5.10.0</version>
<scope>test</scope>
</dependency>
<dependency>
<groupId>org.mockito</groupId>
<artifactId>mockito-junit-jupiter</artifactId>
<version>5.4.0</version>
<version>5.6.0</version>
<scope>test</scope>
</dependency>
<!--Integration test dependencies -->
<dependency>
<groupId>com.exasol</groupId>
<artifactId>exasol-testcontainers</artifactId>
<version>6.6.1</version>
<version>6.6.2</version>
<scope>test</scope>
</dependency>
<dependency>
Expand All @@ -97,13 +97,13 @@
<dependency>
<groupId>com.exasol</groupId>
<artifactId>test-db-builder-java</artifactId>
<version>3.4.2</version>
<version>3.5.1</version>
<scope>test</scope>
</dependency>
<dependency>
<groupId>com.exasol</groupId>
<artifactId>hamcrest-resultset-matcher</artifactId>
<version>1.6.0</version>
<version>1.6.1</version>
<scope>test</scope>
</dependency>
</dependencies>
Expand Down Expand Up @@ -135,7 +135,7 @@
<plugin>
<groupId>com.exasol</groupId>
<artifactId>project-keeper-maven-plugin</artifactId>
<version>2.9.9</version>
<version>2.9.12</version>
<executions>
<execution>
<goals>
Expand Down
Loading

0 comments on commit 023ea57

Please sign in to comment.