Security/fix CVE 2024 36114 (#57)

* Security update - fix for CVE-2024-36114
exasol · Jun 4, 2024 · 40350a8 · 40350a8
1 parent ee61ff4
commit 40350a8
Show file tree

Hide file tree

Showing 11 changed files with 57 additions and 35 deletions.
diff --git a/.github/workflows/broken_links_checker.yml b/.github/workflows/broken_links_checker.yml
diff --git a/.github/workflows/ci-build-next-java.yml b/.github/workflows/ci-build-next-java.yml
diff --git a/.github/workflows/ci-build.yml b/.github/workflows/ci-build.yml
diff --git a/.github/workflows/dependencies_update.yml b/.github/workflows/dependencies_update.yml
diff --git a/dependencies.md b/dependencies.md
diff --git a/doc/changes/changelog.md b/doc/changes/changelog.md
diff --git a/doc/changes/changes_2.0.5.md b/doc/changes/changes_2.0.5.md
@@ -0,0 +1,31 @@
+# Virtual Schema for Document Data in Files on Azure Blob Storage 2.0.5, released 2024-06-04
+
+Code name: Security update - fix for CVE-2024-36114
+
+## Summary
+
+Fixed CVE-2024-36114 https://github.com/advisories/GHSA-973x-65j7-xcf4.
+
+## Security
+
+* #56: CVE-2024-36114: io.airlift:aircompressor:jar:0.21:compile
+
+## Dependency Updates
+
+### Compile Dependency Updates
+
+* Updated `com.exasol:virtual-schema-common-document-files:8.0.3` to `8.0.4`
+
+### Test Dependency Updates
+
+* Updated `com.exasol:virtual-schema-common-document-files:8.0.3` to `8.0.4`
+* Updated `org.jacoco:org.jacoco.agent:0.8.11` to `0.8.12`
+
+### Plugin Dependency Updates
+
+* Updated `com.exasol:error-code-crawler-maven-plugin:2.0.2` to `2.0.3`
+* Updated `com.exasol:project-keeper-maven-plugin:4.3.0` to `4.3.2`
+* Updated `org.apache.maven.plugins:maven-enforcer-plugin:3.4.1` to `3.5.0`
+* Updated `org.apache.maven.plugins:maven-jar-plugin:3.3.0` to `3.4.1`
+* Updated `org.apache.maven.plugins:maven-toolchains-plugin:3.1.0` to `3.2.0`
+* Updated `org.sonarsource.scanner.maven:sonar-maven-plugin:3.11.0.3922` to `4.0.0.4121`
diff --git a/doc/user_guide/user_guide.md b/doc/user_guide/user_guide.md
@@ -17,7 +17,7 @@ Next create the Adapter Script:
  ```sql
 CREATE OR REPLACE JAVA ADAPTER SCRIPT ADAPTER.AZURE_BLOB_STORAGE_FILES_ADAPTER AS
  %scriptclass com.exasol.adapter.RequestDispatcher;
- %jar /buckets/bfsdefault/default/document-files-virtual-schema-dist-8.0.3-azure-blob-storage-2.0.4.jar;
+ %jar /buckets/bfsdefault/default/document-files-virtual-schema-dist-8.0.4-azure-blob-storage-2.0.5.jar;
 /
 ```
 
@@ -30,7 +30,7 @@ CREATE OR REPLACE JAVA SET SCRIPT ADAPTER.IMPORT_FROM_AZURE_BLOB_STORAGE_DOCUMEN
  CONNECTION_NAME VARCHAR(500))
  EMITS(...) AS
  %scriptclass com.exasol.adapter.document.UdfEntryPoint;
- %jar /buckets/bfsdefault/default/document-files-virtual-schema-dist-8.0.3-azure-blob-storage-2.0.4.jar;
+ %jar /buckets/bfsdefault/default/document-files-virtual-schema-dist-8.0.4-azure-blob-storage-2.0.5.jar;
 /
 ```
 

diff --git a/pk_generated_parent.pom b/pk_generated_parent.pom
diff --git a/pom.xml b/pom.xml
@@ -2,12 +2,12 @@
 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
  <modelVersion>4.0.0</modelVersion>
  <artifactId>azure-blob-storage-document-files-virtual-schema</artifactId>
- <version>2.0.4</version>
+ <version>2.0.5</version>
  <name>Virtual Schema for document data in files on Azure Blob Storage</name>
  <description>Adapter for document data access from files from Azure Blob Storage.</description>
  <url>https://github.com/exasol/azure-blob-storage-document-files-virtual-schema/</url>
  <properties>
- <vs-common-document-files.version>8.0.3</vs-common-document-files.version>
+ <vs-common-document-files.version>8.0.4</vs-common-document-files.version>
  </properties>
  <profiles>
  <profile>
@@ -153,7 +153,7 @@
  <plugin>
  <groupId>com.exasol</groupId>
  <artifactId>project-keeper-maven-plugin</artifactId>
- <version>4.3.0</version>
+ <version>4.3.2</version>
  <executions>
  <execution>
  <goals>
@@ -188,7 +188,7 @@
  <parent>
  <artifactId>azure-blob-storage-document-files-virtual-schema-generated-parent</artifactId>
  <groupId>com.exasol</groupId>
- <version>2.0.4</version>
+ <version>2.0.5</version>
  <relativePath>pk_generated_parent.pom</relativePath>
  </parent>
 </project>
diff --git a/src/test/java/com/exasol/adapter/document/files/IntegrationTestSetup.java b/src/test/java/com/exasol/adapter/document/files/IntegrationTestSetup.java
@@ -26,7 +26,7 @@
 import jakarta.json.*;
 
 public class IntegrationTestSetup implements AutoCloseable {
- private static final String ADAPTER_JAR = "document-files-virtual-schema-dist-8.0.3-azure-blob-storage-2.0.4.jar";
+ private static final String ADAPTER_JAR = "document-files-virtual-schema-dist-8.0.4-azure-blob-storage-2.0.5.jar";
  private final ExasolTestSetup exasolTestSetup;
  private final Connection exasolConnection;
  private final Statement exasolStatement;