Skip to content

Commit e1f48d4

Browse files
author
Automatic Dependency Updater
committed
🔐 Update dependencies to fix vulnerabilities
1 parent 390faa3 commit e1f48d4

File tree

5 files changed

+64
-20
lines changed

5 files changed

+64
-20
lines changed

‎dependencies.md

Lines changed: 3 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎doc/changes/changelog.md

Lines changed: 1 addition & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎doc/changes/changes_3.6.1.md

Lines changed: 43 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,43 @@
1+
# Test Database Builder for Java 3.6.1, released 2025-??-??
2+
3+
Code name: Fixed vulnerability CVE-2024-55551 in com.exasol:exasol-jdbc:jar:24.1.2:test
4+
5+
## Summary
6+
7+
This release fixes the following vulnerability:
8+
9+
### CVE-2024-55551 (CWE-94) in dependency `com.exasol:exasol-jdbc:jar:24.1.2:test`
10+
An issue was discovered in Exasol jdbc driver 24.2.0. Attackers can inject malicious parameters into the JDBC URL, triggering JNDI injection during the process when the JDBC Driver uses this URL to connect to the database. This can further lead to remote code execution vulnerability.
11+
#### References
12+
* https://ossindex.sonatype.org/vulnerability/CVE-2024-55551?component-type=maven&component-name=com.exasol%2Fexasol-jdbc&utm_source=ossindex-client&utm_medium=integration&utm_content=1.8.1
13+
* http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-55551
14+
* https://gist.github.com/azraelxuemo/9565ec9219e0c3e9afd5474904c39d0f
15+
16+
## Security
17+
18+
* #145: Fixed vulnerability CVE-2024-55551 in dependency `com.exasol:exasol-jdbc:jar:24.1.2:test`
19+
20+
## Dependency Updates
21+
22+
### Test Dependency Updates
23+
24+
* Updated `com.exasol:exasol-jdbc:24.1.2` to `25.2.2`
25+
* Updated `com.exasol:exasol-testcontainers:7.1.1` to `7.1.4`
26+
* Updated `com.google.protobuf:protobuf-java:4.28.2` to `4.30.1`
27+
* Updated `com.mysql:mysql-connector-j:9.0.0` to `9.2.0`
28+
* Updated `com.oracle.database.jdbc:ojdbc11:23.5.0.24.07` to `23.7.0.25.01`
29+
* Updated `nl.jqno.equalsverifier:equalsverifier:3.16.2` to `3.19.2`
30+
* Updated `org.junit-pioneer:junit-pioneer:2.2.0` to `2.3.0`
31+
* Updated `org.junit.jupiter:junit-jupiter-api:5.11.0` to `5.12.1`
32+
* Updated `org.junit.jupiter:junit-jupiter-engine:5.11.0` to `5.12.1`
33+
* Updated `org.mockito:mockito-junit-jupiter:5.13.0` to `5.16.1`
34+
* Updated `org.postgresql:postgresql:42.7.4` to `42.7.5`
35+
* Updated `org.slf4j:slf4j-jdk14:2.0.16` to `2.0.17`
36+
* Updated `org.testcontainers:junit-jupiter:1.20.1` to `1.20.6`
37+
* Updated `org.testcontainers:mysql:1.20.1` to `1.20.6`
38+
* Updated `org.testcontainers:oracle-xe:1.20.1` to `1.20.6`
39+
* Updated `org.testcontainers:postgresql:1.20.1` to `1.20.6`
40+
41+
### Plugin Dependency Updates
42+
43+
* Updated `com.exasol:project-keeper-maven-plugin:4.3.3` to `5.0.0`

‎pk_generated_parent.pom

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎pom.xml

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -2,49 +2,49 @@
22
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
33
<modelVersion>4.0.0</modelVersion>
44
<artifactId>test-db-builder-java</artifactId>
5-
<version>3.6.0</version>
5+
<version>3.6.1</version>
66
<name>Test Database Builder for Java</name>
77
<description>pom.xml</description>
88
<url>https://github.com/exasol/test-db-builder-java/</url>
99
<properties>
10-
<test.containers.version>1.20.1</test.containers.version>
10+
<test.containers.version>1.20.6</test.containers.version>
1111
</properties>
1212
<dependencies>
1313
<dependency>
1414
<groupId>com.exasol</groupId>
1515
<artifactId>exasol-jdbc</artifactId>
16-
<version>24.1.2</version>
16+
<version>25.2.2</version>
1717
<scope>test</scope>
1818
</dependency>
1919
<dependency>
2020
<groupId>com.mysql</groupId>
2121
<artifactId>mysql-connector-j</artifactId>
22-
<version>9.0.0</version>
22+
<version>9.2.0</version>
2323
<scope>test</scope>
2424
</dependency>
2525
<dependency>
2626
<!-- Upgrade transitive dependency of mysql-connector-j to fix CVE-2024-7254 -->
2727
<groupId>com.google.protobuf</groupId>
2828
<artifactId>protobuf-java</artifactId>
29-
<version>4.28.2</version>
29+
<version>4.30.1</version>
3030
<scope>test</scope>
3131
</dependency>
3232
<dependency>
3333
<groupId>org.postgresql</groupId>
3434
<artifactId>postgresql</artifactId>
35-
<version>42.7.4</version>
35+
<version>42.7.5</version>
3636
<scope>test</scope>
3737
</dependency>
3838
<dependency>
3939
<groupId>com.oracle.database.jdbc</groupId>
4040
<artifactId>ojdbc11</artifactId>
41-
<version>23.5.0.24.07</version>
41+
<version>23.7.0.25.01</version>
4242
<scope>test</scope>
4343
</dependency>
4444
<dependency>
4545
<groupId>org.junit-pioneer</groupId>
4646
<artifactId>junit-pioneer</artifactId>
47-
<version>2.2.0</version>
47+
<version>2.3.0</version>
4848
<scope>test</scope>
4949
</dependency>
5050
<dependency>
@@ -55,7 +55,7 @@
5555
<dependency>
5656
<groupId>com.exasol</groupId>
5757
<artifactId>exasol-testcontainers</artifactId>
58-
<version>7.1.1</version>
58+
<version>7.1.4</version>
5959
<scope>test</scope>
6060
</dependency>
6161
<dependency>
@@ -97,25 +97,25 @@
9797
<dependency>
9898
<groupId>org.junit.jupiter</groupId>
9999
<artifactId>junit-jupiter-api</artifactId>
100-
<version>5.11.0</version>
100+
<version>5.12.1</version>
101101
<scope>test</scope>
102102
</dependency>
103103
<dependency>
104104
<groupId>org.junit.jupiter</groupId>
105105
<artifactId>junit-jupiter-engine</artifactId>
106-
<version>5.11.0</version>
106+
<version>5.12.1</version>
107107
<scope>test</scope>
108108
</dependency>
109109
<dependency>
110110
<groupId>org.mockito</groupId>
111111
<artifactId>mockito-junit-jupiter</artifactId>
112-
<version>5.13.0</version>
112+
<version>5.16.1</version>
113113
<scope>test</scope>
114114
</dependency>
115115
<dependency>
116116
<groupId>nl.jqno.equalsverifier</groupId>
117117
<artifactId>equalsverifier</artifactId>
118-
<version>3.16.2</version>
118+
<version>3.19.2</version>
119119
<scope>test</scope>
120120
</dependency>
121121
<dependency>
@@ -127,7 +127,7 @@
127127
<!-- Enable log output for integration tests -->
128128
<groupId>org.slf4j</groupId>
129129
<artifactId>slf4j-jdk14</artifactId>
130-
<version>2.0.16</version>
130+
<version>2.0.17</version>
131131
<scope>test</scope>
132132
</dependency>
133133
</dependencies>
@@ -152,7 +152,7 @@
152152
<plugin>
153153
<groupId>com.exasol</groupId>
154154
<artifactId>project-keeper-maven-plugin</artifactId>
155-
<version>4.3.3</version>
155+
<version>5.0.0</version>
156156
<executions>
157157
<execution>
158158
<goals>
@@ -176,7 +176,7 @@
176176
<parent>
177177
<artifactId>test-db-builder-java-generated-parent</artifactId>
178178
<groupId>com.exasol</groupId>
179-
<version>3.6.0</version>
179+
<version>3.6.1</version>
180180
<relativePath>pk_generated_parent.pom</relativePath>
181181
</parent>
182182
</project>

0 commit comments

Comments
 (0)