Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix CVEs about h2database #24001

Draft
wants to merge 10 commits into
base: master
Choose a base branch
from
Draft

Fix CVEs about h2database #24001

Changes from 2 commits
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
a442074
Fix CVEs about h2database dependency
ShahimSharafudeen Nov 13, 2024
07d24ed
Upgrad H2database to 1.4.200
ShahimSharafudeen Nov 14, 2024
2a60472
Upgrade the H2db version to 2.2.220 and update the expected query syntax
ShahimSharafudeen Nov 20, 2024
6315d1c
Set non keywords in H2 database 2.x
ShahimSharafudeen Nov 21, 2024
fd0a5f7
Update the H2db startdate as after 1890-09-30
ShahimSharafudeen Nov 21, 2024
861fb90
Fix cast null as array syntax error in AbstractTestWindowQueries class
ShahimSharafudeen Nov 22, 2024
4678820
Set non keyword as Value and Key in jdbc url
ShahimSharafudeen Nov 22, 2024
5cd023c
Fix the nested Array and Row syntax change issue
ShahimSharafudeen Nov 26, 2024
248986b
Fix decimal cast syntax error
ShahimSharafudeen Nov 26, 2024
359b804
Fix the nested array and row syntax issue
ShahimSharafudeen Dec 17, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1180,7 +1180,7 @@
<dependency>
<groupId>com.h2database</groupId>
<artifactId>h2</artifactId>
<version>1.4.199</version>
<version>1.4.200</version>
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let us know if you were able to figure out the root cause of the issue we discussed internally.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ya I found the issue. H2db version 1.4.200 only support the start date from "1890-09-30". If i am give above that this date then test cases will pass.
Reference link : h2database/h2database#2261
Currently i am trying to upgrade the version as 2.2.220, which has no vulnerabilities.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good find. :D

</dependency>

<dependency>
Expand Down
Loading