Skip to content

Commit

Permalink
#26: Fix CVE-2023-4043 in test dependency `org.eclipse.parsson:parsso…
Browse files Browse the repository at this point in the history
…n` (#27)
  • Loading branch information
kaklakariada committed Nov 21, 2023
1 parent 6873975 commit 5da14f3
Show file tree
Hide file tree
Showing 12 changed files with 172 additions and 119 deletions.
23 changes: 18 additions & 5 deletions .github/workflows/ci-build.yml

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

23 changes: 19 additions & 4 deletions .github/workflows/dependencies_check.yml

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 5 additions & 5 deletions .project-keeper.yml
Original file line number Diff line number Diff line change
Expand Up @@ -4,8 +4,8 @@ sources:
modules:
- jar_artifact
- integration_tests
linkReplacements:
- https://www.microsoft.com/en-us/sql-server/sql-server-2017|https://www.microsoft.com/en-us/sql-server
excludes:
- "E-PK-CORE-18: Outdated content: '.github/workflows/ci-build.yml'"
- "E-PK-CORE-18: Outdated content: '.github/workflows/release_droid_prepare_original_checksum.yml'"
build:
runnerOs: ubuntu-20.04
exasolDbVersions:
- "7.1.24"
- "8.23.1"
98 changes: 45 additions & 53 deletions dependencies.md

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

1 change: 1 addition & 0 deletions doc/changes/changelog.md

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

40 changes: 40 additions & 0 deletions doc/changes/changes_2.1.2.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,40 @@
# Virtual Schema for SQLServer 2.1.2, released 2023-11-21

Code name: Fix CVE-2023-4043 in test dependency `org.eclipse.parsson:parsson`

## Summary

This release fixes vulnerability CVE-2023-4043 in test dependency `org.eclipse.parsson:parsson`. It also runs integration tests with Exasol DB version 8.

## Security

* #26: Fixed CVE-2023-4043 in test dependency `org.eclipse.parsson:parsson`

## Feature

* #21: Updated tests to Exasol DB version 8

## Dependency Updates

### Test Dependency Updates

* Updated `com.exasol:exasol-testcontainers:6.6.2` to `6.6.3`
* Updated `com.exasol:hamcrest-resultset-matcher:1.6.1` to `1.6.3`
* Updated `com.exasol:test-db-builder-java:3.5.1` to `3.5.2`
* Updated `com.microsoft.sqlserver:mssql-jdbc:11.2.1.jre8` to `12.4.2.jre8`
* Updated `org.junit.jupiter:junit-jupiter:5.10.0` to `5.10.1`
* Updated `org.mockito:mockito-junit-jupiter:5.6.0` to `5.7.0`
* Added `org.slf4j:slf4j-jdk14:2.0.9`
* Updated `org.testcontainers:junit-jupiter:1.19.1` to `1.19.2`
* Updated `org.testcontainers:mssqlserver:1.19.1` to `1.19.2`

### Plugin Dependency Updates

* Updated `com.exasol:error-code-crawler-maven-plugin:1.3.0` to `1.3.1`
* Updated `com.exasol:project-keeper-maven-plugin:2.9.12` to `2.9.16`
* Updated `org.apache.maven.plugins:maven-enforcer-plugin:3.4.0` to `3.4.1`
* Updated `org.apache.maven.plugins:maven-failsafe-plugin:3.1.2` to `3.2.2`
* Updated `org.apache.maven.plugins:maven-surefire-plugin:3.1.2` to `3.2.2`
* Updated `org.codehaus.mojo:versions-maven-plugin:2.16.0` to `2.16.1`
* Updated `org.jacoco:jacoco-maven-plugin:0.8.10` to `0.8.11`
* Updated `org.sonarsource.scanner.maven:sonar-maven-plugin:3.9.1.2184` to `3.10.0.2594`
5 changes: 3 additions & 2 deletions doc/user_guide/sqlserver_user_guide.md
Original file line number Diff line number Diff line change
Expand Up @@ -46,7 +46,7 @@ The SQL statement below creates the adapter script, defines the Java class that
```sql
CREATE OR REPLACE JAVA ADAPTER SCRIPT SCHEMA_FOR_VS_SCRIPT.ADAPTER_SCRIPT_SQLSERVER AS
%scriptclass com.exasol.adapter.RequestDispatcher;
%jar /buckets/<BFS service>/<bucket>/virtual-schema-dist-11.0.2-sqlserver-2.1.1.jar;
%jar /buckets/<BFS service>/<bucket>/virtual-schema-dist-11.0.2-sqlserver-2.1.2.jar;
%jar /buckets/<BFS service>/<bucket>/mssql-jdbc-<version>.jre8.jar;
/
```
Expand Down Expand Up @@ -126,7 +126,8 @@ In the following matrix you find combinations of JDBC driver and dialect version

| Virtual Schema Version | SQL SERVER Version | Driver Name | Driver Version |
|------------------------|------------------------|-------------------|----------------|
| Latest | 2019-CU17-ubuntu-20.04 | MS SQL JDBC JRE 8 | 11.2.0.jre8 |
| 2.1.1 | 2019-CU17-ubuntu-20.04 | MS SQL JDBC JRE 8 | 11.2.0.jre8 |
| Latest, 2.1.2 | 2022-CU10-ubuntu-22.04 | MS SQL JDBC JRE 8 | 12.4.2.jre8 |


## Known Issues
Expand Down
Loading

0 comments on commit 5da14f3

Please sign in to comment.