Skip to content

2.0.15 Fixing CVEs in Netty

Choose a tag to compare

View all tags
@github-actions github-actions released this 30 Oct 07:33
· 3 commits to main since this release
2.0.15
94ef5fe
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

This release upgrades transitive dependencies to fix CVEs in the Netty library.

Security

  • #68: CVE-2025-58057: io.netty:netty-codec:jar:4.1.124.Final:provided
  • #70: CVE-2025-58056: io.netty:netty-codec-http:jar:4.1.124.Final:provided
  • CVE-2025-58457 CWE-280: Improper Handling of Insufficient Permissions or Privileges in org.apache.zookeeper:zookeeper:jar:3.9.3:provided

Dependency Updates

Plugin Dependency Updates

  • Updated com.exasol:error-code-crawler-maven-plugin:2.0.4 to 2.0.5
  • Updated com.exasol:project-keeper-maven-plugin:5.2.3 to 5.4.3
  • Updated com.exasol:quality-summarizer-maven-plugin:0.2.0 to 0.2.1
  • Updated io.github.git-commit-id:git-commit-id-maven-plugin:9.0.1 to 9.0.2
  • Updated org.apache.maven.plugins:maven-artifact-plugin:3.6.0 to 3.6.1
  • Updated org.apache.maven.plugins:maven-clean-plugin:3.4.1 to 3.5.0
  • Updated org.apache.maven.plugins:maven-compiler-plugin:3.14.0 to 3.14.1
  • Updated org.apache.maven.plugins:maven-enforcer-plugin:3.5.0 to 3.6.2
  • Updated org.apache.maven.plugins:maven-failsafe-plugin:3.5.3 to 3.5.4
  • Updated org.apache.maven.plugins:maven-gpg-plugin:3.2.7 to 3.2.8
  • Updated org.apache.maven.plugins:maven-javadoc-plugin:3.11.2 to 3.12.0
  • Updated org.apache.maven.plugins:maven-surefire-plugin:3.5.3 to 3.5.4
  • Updated org.codehaus.mojo:flatten-maven-plugin:1.7.0 to 1.7.3
  • Updated org.codehaus.mojo:versions-maven-plugin:2.18.0 to 2.19.1
  • Updated org.jacoco:jacoco-maven-plugin:0.8.13 to 0.8.14
  • Updated org.sonarsource.scanner.maven:sonar-maven-plugin:5.1.0.4751 to 5.2.0.4988
  • Updated org.sonatype.central:central-publishing-maven-plugin:0.7.0 to 0.9.0
Assets 4
Loading