Skip to content
This repository was archived by the owner on May 9, 2025. It is now read-only.

0.2.6: Fix CVE-2024-25710 and CVE-2024-26308 in test dependency `org.apache.commons:commons-compress`

Choose a tag to compare

View all tags
@kaklakariada kaklakariada released this 04 Mar 11:17
· 5 commits to main since this release
0.2.6
76c8cc2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Summary

This release fixes vulnerabilities CVE-2024-25710 and CVE-2024-26308 in test dependency org.apache.commons:commons-compress.

Security

Dependency Updates

Java Class List Extractor (aggregator Pom)

Plugin Dependency Updates

  • Updated com.exasol:error-code-crawler-maven-plugin:1.3.0 to 2.0.1
  • Updated com.exasol:project-keeper-maven-plugin:2.9.12 to 4.1.0
  • Added io.github.zlika:reproducible-build-maven-plugin:0.16
  • Added org.apache.maven.plugins:maven-compiler-plugin:3.12.1
  • Added org.apache.maven.plugins:maven-enforcer-plugin:3.4.1
  • Added org.apache.maven.plugins:maven-gpg-plugin:3.1.0
  • Added org.apache.maven.plugins:maven-javadoc-plugin:3.6.3
  • Added org.apache.maven.plugins:maven-source-plugin:3.2.1
  • Added org.apache.maven.plugins:maven-surefire-plugin:3.2.5
  • Added org.apache.maven.plugins:maven-toolchains-plugin:3.1.0
  • Added org.basepom.maven:duplicate-finder-maven-plugin:2.0.1
  • Added org.codehaus.mojo:flatten-maven-plugin:1.6.0
  • Added org.codehaus.mojo:versions-maven-plugin:2.16.2
  • Updated org.itsallcode:openfasttrace-maven-plugin:1.6.1 to 1.8.0
  • Added org.jacoco:jacoco-maven-plugin:0.8.11
  • Added org.sonarsource.scanner.maven:sonar-maven-plugin:3.10.0.2594
  • Added org.sonatype.ossindex.maven:ossindex-maven-plugin:3.2.0
  • Added org.sonatype.plugins:nexus-staging-maven-plugin:1.6.13

Class List Extractor Agent

Test Dependency Updates

  • Updated org.jacoco:org.jacoco.agent:0.8.10 to 0.8.11
  • Updated org.junit.jupiter:junit-jupiter-api:5.10.0 to 5.10.2
  • Updated org.junit.jupiter:junit-jupiter-params:5.10.0 to 5.10.2

Plugin Dependency Updates

  • Updated com.exasol:error-code-crawler-maven-plugin:1.3.0 to 2.0.0
  • Updated com.exasol:project-keeper-maven-plugin:2.9.12 to 4.1.0
  • Updated org.apache.maven.plugins:maven-compiler-plugin:3.11.0 to 3.12.1
  • Updated org.apache.maven.plugins:maven-dependency-plugin:3.6.0 to 3.6.1
  • Updated org.apache.maven.plugins:maven-enforcer-plugin:3.4.0 to 3.4.1
  • Updated org.apache.maven.plugins:maven-failsafe-plugin:3.1.2 to 3.2.5
  • Updated org.apache.maven.plugins:maven-surefire-plugin:3.1.2 to 3.2.5
  • Added org.apache.maven.plugins:maven-toolchains-plugin:3.1.0
  • Updated org.codehaus.mojo:flatten-maven-plugin:1.5.0 to 1.6.0
  • Updated org.codehaus.mojo:versions-maven-plugin:2.16.0 to 2.16.2
  • Updated org.jacoco:jacoco-maven-plugin:0.8.10 to 0.8.11
  • Updated org.sonarsource.scanner.maven:sonar-maven-plugin:3.9.1.2184 to 3.10.0.2594

Class List Verifier

Compile Dependency Updates

  • Updated com.exasol:bucketfs-java:3.1.1 to 3.1.2

Test Dependency Updates

  • Updated com.exasol:exasol-testcontainers:6.6.2 to 7.0.1
  • Updated com.exasol:test-db-builder-java:3.5.1 to 3.5.3
  • Updated com.exasol:udf-debugging-java:0.6.11 to 0.6.12
  • Updated org.junit.jupiter:junit-jupiter-api:5.10.0 to 5.10.2
  • Updated org.junit.jupiter:junit-jupiter-params:5.10.0 to 5.10.2
  • Updated org.mockito:mockito-junit-jupiter:5.5.0 to 5.11.0
  • Updated org.slf4j:slf4j-jdk14:2.0.9 to 2.0.12
  • Updated org.testcontainers:junit-jupiter:1.19.0 to 1.19.6

Plugin Dependency Updates

  • Updated com.exasol:error-code-crawler-maven-plugin:1.3.0 to 2.0.0
  • Updated com.exasol:project-keeper-maven-plugin:2.9.12 to 4.1.0
  • Updated org.apache.maven.plugins:maven-compiler-plugin:3.11.0 to 3.12.1
  • Updated org.apache.maven.plugins:maven-enforcer-plugin:3.4.0 to 3.4.1
  • Updated org.apache.maven.plugins:maven-failsafe-plugin:3.1.2 to 3.2.5
  • Updated org.apache.maven.plugins:maven-javadoc-plugin:3.5.0 to 3.6.3
  • Updated org.apache.maven.plugins:maven-surefire-plugin:3.1.2 to 3.2.5
  • Added org.apache.maven.plugins:maven-toolchains-plugin:3.1.0
  • Updated org.codehaus.mojo:flatten-maven-plugin:1.5.0 to 1.6.0
  • Updated org.codehaus.mojo:versions-maven-plugin:2.16.0 to 2.16.2
  • Updated org.jacoco:jacoco-maven-plugin:0.8.10 to 0.8.11
  • Updated org.sonarsource.scanner.maven:sonar-maven-plugin:3.9.1.2184 to 3.10.0.2594
Assets 2
Loading