diff --git a/dependencies.md b/dependencies.md index 219c73f..4d123a4 100644 --- a/dependencies.md +++ b/dependencies.md @@ -24,7 +24,7 @@ | [Hamcrest][11] | [BSD-3-Clause][12] | | [JUnit Jupiter Params][13] | [Eclipse Public License v2.0][14] | | [EqualsVerifier \| release normal jar][15] | [Apache License, Version 2.0][16] | -| [SLF4J JDK14 Provider][17] | [MIT License][18] | +| [SLF4J JDK14 Provider][17] | [MIT][18] | ### Runtime Dependencies @@ -85,12 +85,12 @@ [10]: https://opensource.org/licenses/MIT [11]: http://hamcrest.org/JavaHamcrest/ [12]: https://raw.githubusercontent.com/hamcrest/JavaHamcrest/master/LICENSE -[13]: https://junit.org/junit5/ +[13]: https://junit.org/ [14]: https://www.eclipse.org/legal/epl-v20.html [15]: https://www.jqno.nl/equalsverifier [16]: https://www.apache.org/licenses/LICENSE-2.0.txt [17]: http://www.slf4j.org -[18]: http://www.opensource.org/licenses/mit-license.php +[18]: https://opensource.org/license/mit [19]: https://projects.eclipse.org/projects/ee4j.yasson [20]: http://www.eclipse.org/legal/epl-v20.html [21]: http://www.eclipse.org/org/documents/edl-v10.php diff --git a/doc/changes/changelog.md b/doc/changes/changelog.md index c79a4dd..2a82b13 100644 --- a/doc/changes/changelog.md +++ b/doc/changes/changelog.md @@ -1,5 +1,6 @@ # Changes +* [0.1.14](changes_0.1.14.md) * [0.1.13](changes_0.1.13.md) * [0.1.12](changes_0.1.12.md) * [0.1.11](changes_0.1.11.md) diff --git a/doc/changes/changes_0.1.14.md b/doc/changes/changes_0.1.14.md new file mode 100644 index 0000000..c9b6e9d --- /dev/null +++ b/doc/changes/changes_0.1.14.md @@ -0,0 +1,37 @@ +# Small Json Files Test Fixture 0.1.14, released 2025-??-?? + +Code name: Fixed vulnerability CVE-2025-58057 in io.netty:netty-codec:jar:4.1.124.Final:runtime + +## Summary + +This release fixes the following vulnerability: + +### CVE-2025-58057 (CWE-409) in dependency `io.netty:netty-codec:jar:4.1.124.Final:runtime` +netty-codec - Improper Handling of Highly Compressed Data (Data Amplification) +#### References +* https://ossindex.sonatype.org/vulnerability/CVE-2025-58057?component-type=maven&component-name=io.netty%2Fnetty-codec&utm_source=ossindex-client&utm_medium=integration&utm_content=1.8.1 +* http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2025-58057 +* https://github.com/netty/netty/security/advisories/GHSA-3p8m-j85q-pgmj + +## Security + +* #44: Fixed vulnerability CVE-2025-58057 in dependency `io.netty:netty-codec:jar:4.1.124.Final:runtime` + +## Dependency Updates + +### Small Json Files Test Fixture + +#### Compile Dependency Updates + +* Updated `org.mockito:mockito-core:5.15.2` to `5.19.0` +* Updated `software.amazon.awssdk:apache-client:2.32.25` to `2.33.3` +* Updated `software.amazon.awssdk:iam:2.32.25` to `2.33.3` +* Updated `software.amazon.awssdk:lambda:2.32.25` to `2.33.3` +* Updated `software.amazon.awssdk:s3:2.32.25` to `2.33.3` +* Updated `software.amazon.awssdk:sts:2.32.25` to `2.33.3` + +#### Test Dependency Updates + +* Updated `nl.jqno.equalsverifier:equalsverifier:3.19` to `4.1` +* Updated `org.junit.jupiter:junit-jupiter-params:5.11.4` to `5.13.4` +* Updated `org.slf4j:slf4j-jdk14:2.0.16` to `2.0.17` diff --git a/pk_generated_parent.pom b/pk_generated_parent.pom index f682874..e930b67 100644 --- a/pk_generated_parent.pom +++ b/pk_generated_parent.pom @@ -3,7 +3,7 @@ 4.0.0 com.exasol small-json-files-test-fixture-generated-parent - 0.1.13 + 0.1.14 pom UTF-8 diff --git a/pom.xml b/pom.xml index b580480..8807183 100644 --- a/pom.xml +++ b/pom.xml @@ -1,8 +1,8 @@ - + 4.0.0 small-json-files-test-fixture - 0.1.13 + 0.1.14 Small Json Files Test Fixture Test fixture with many small JSON files on S3. https://github.com/exasol/small-json-files-test-fixture/ @@ -11,7 +11,7 @@ software.amazon.awssdk bom - 2.32.25 + 2.33.3 pom import @@ -69,25 +69,25 @@ org.junit.jupiter junit-jupiter-params - 5.11.4 + 5.13.4 test org.mockito mockito-core - 5.15.2 + 5.19.0 nl.jqno.equalsverifier equalsverifier - 3.19 + 4.1 test org.slf4j slf4j-jdk14 - 2.0.16 + 2.0.17 test @@ -165,7 +165,7 @@ small-json-files-test-fixture-generated-parent com.exasol - 0.1.13 + 0.1.14 pk_generated_parent.pom