Updated transitive dependency of extension-manager-integration-test-java

exasol · Nov 18, 2024 · 2823680 · 2823680
1 parent faaeee2
commit 2823680
Show file tree

Hide file tree

Showing 3 changed files with 75 additions and 64 deletions.
diff --git a/dependencies.md b/dependencies.md
diff --git a/doc/changes/changes_3.0.3.md b/doc/changes/changes_3.0.3.md
@@ -28,6 +28,7 @@ Netty is an asynchronous event-driven network application framework for rapid de
 * Updated `com.exasol:hamcrest-resultset-matcher:1.6.5` to `1.7.0`
 * Updated `com.exasol:test-db-builder-java:3.5.4` to `3.6.0`
 * Updated `com.oracle.database.jdbc:ojdbc8:23.4.0.24.05` to `23.6.0.24.10`
+* Added `io.netty:netty-common:4.1.115.Final`
 * Updated `nl.jqno.equalsverifier:equalsverifier:3.16.1` to `3.17.3`
 * Updated `org.hamcrest:hamcrest:2.2` to `3.0`
 * Updated `org.jacoco:org.jacoco.agent:0.8.11` to `0.8.12`

diff --git a/pom.xml b/pom.xml
@@ -142,6 +142,13 @@
             <version>0.5.12</version>
             <scope>test</scope>
         </dependency>
+        <!-- update transitive dependency com.exasol:extension-manager-client-java to fix vulnerability CVE-2024-47535 -->
+        <dependency>
+            <groupId>io.netty</groupId>
+            <artifactId>netty-common</artifactId>
+            <version>4.1.115.Final</version>
+            <scope>test</scope>
+        </dependency>
     </dependencies>
     <build>
         <plugins>