Skip to content

Commit

Permalink
Bump commons-io version from 1.3.2 to 2.11.0 (#165)
Browse files Browse the repository at this point in the history
* Bump commons-io version from 1.3.2 to 2.11.0

    An [improper limited path
    traversal vulnerability](https://nvd.nist.gov/vuln/detail/CVE-2021-29425) was found in
    commons-io:commons-io. Bumping the version from 1.3.2 to 2.11.0 gives a
    version without the CVE.

    Made the background query in CancelTest.java longer so that it
    wouldn't finish before the test tried to cancel the query.

---------

Co-authored-by: Shalani Weerasooriya <shalaniw@google.com>
  • Loading branch information
shalaniw and Shalani Weerasooriya authored Jun 29, 2023
1 parent f2443d5 commit 5dc0373
Show file tree
Hide file tree
Showing 2 changed files with 17 additions and 2 deletions.
2 changes: 1 addition & 1 deletion pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -104,7 +104,7 @@
<dependency>
<groupId>commons-io</groupId>
<artifactId>commons-io</artifactId>
<version>1.3.2</version>
<version>2.11.0</version>
</dependency>
<dependency>
<groupId>com.google.api-client</groupId>
Expand Down
17 changes: 16 additions & 1 deletion src/test/java/net/starschema/clouddb/jdbc/CancelTest.java
Original file line number Diff line number Diff line change
Expand Up @@ -70,7 +70,22 @@ public void run() {
+ " (SELECT 391171 AS num) UNION ALL\n"
+ " (SELECT 391172 AS num) UNION ALL\n"
+ " (SELECT 391173 AS num) UNION ALL\n"
+ " (SELECT 391174 AS num))\n"
+ " (SELECT 391174 AS num) UNION ALL\n"
+ " (SELECT 391175 AS num) UNION ALL\n"
+ " (SELECT 391176 AS num) UNION ALL\n"
+ " (SELECT 391177 AS num) UNION ALL\n"
+ " (SELECT 391178 AS num) UNION ALL\n"
+ " (SELECT 391179 AS num) UNION ALL\n"
+ " (SELECT 391180 AS num) UNION ALL\n"
+ " (SELECT 391181 AS num) UNION ALL\n"
+ " (SELECT 391182 AS num) UNION ALL\n"
+ " (SELECT 391183 AS num) UNION ALL\n"
+ " (SELECT 391184 AS num) UNION ALL\n"
+ " (SELECT 391185 AS num) UNION ALL\n"
+ " (SELECT 391186 AS num) UNION ALL\n"
+ " (SELECT 391187 AS num) UNION ALL\n"
+ " (SELECT 391188 AS num) UNION ALL\n"
+ " (SELECT 391189 AS num))\n"
+ "SELECT count(*) from d d1, d d2, d d3, d d4, d d5, d d6, d d7, d d8, d d9"
+ " LIMIT "
+ limit;
Expand Down

0 comments on commit 5dc0373

Please sign in to comment.