CVE-2023-22899 CVE-2018-1002202 CVE-2022-24615 Bump net.lingala.zip4j…

… 2.11.5 (#43)
OpenIdentityPlatform · Jun 25, 2024 · b2c91dd · b2c91dd
1 parent a6dbfe2
commit b2c91dd
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 5 deletions.
diff --git a/...dm-maintenance/src/main/java/org/forgerock/openidm/maintenance/upgrade/UpdateManager.java b/...dm-maintenance/src/main/java/org/forgerock/openidm/maintenance/upgrade/UpdateManager.java
@@ -96,7 +96,7 @@ public interface UpdateManager {
      * Get the contents of an archive file as a string
      * @param archive
      * @param file
-     * @return
+     * @return JsonValue
      * @throws UpdateException
      */
     JsonValue getArchiveFile(Path archive, Path file) throws UpdateException;

diff --git a/...aintenance/src/main/java/org/forgerock/openidm/maintenance/upgrade/UpdateManagerImpl.java b/...aintenance/src/main/java/org/forgerock/openidm/maintenance/upgrade/UpdateManagerImpl.java
@@ -56,7 +56,7 @@
 
 import difflib.DiffUtils;
 import difflib.Patch;
-import net.lingala.zip4j.core.ZipFile;
+import net.lingala.zip4j.ZipFile;
 import net.lingala.zip4j.exception.ZipException;
 import org.apache.commons.io.FileUtils;
 import org.forgerock.commons.launcher.OSGiFrameworkService;
@@ -805,7 +805,7 @@ public JsonValue getLicense(Path archiveFile) throws UpdateException {
             } catch (IOException e) {
                 throw new UpdateException("Unable to load license file.", e);
             }
-        } catch (IOException | ZipException e) {
+        } catch (IOException e) {
             return json(object());
         }
     }
@@ -1429,7 +1429,7 @@ Path extractFileToDirectory(File zipFile, Path fileToExtract) throws UpdateExcep
             Path tmpDir = Files.createTempDirectory(UUID.randomUUID().toString());
             zip.extractFile(fileToExtract.toString(), tmpDir.toString());
             return tmpDir.resolve(fileToExtract).getParent();
-        } catch (IOException | ZipException e) {
+        } catch (IOException  e) {
             throw new UpdateException("Unable to load " + fileToExtract + ".", e);
         }
     }

diff --git a/pom.xml b/pom.xml
@@ -640,7 +640,7 @@
             <dependency>
                 <groupId>net.lingala.zip4j</groupId>
                 <artifactId>zip4j</artifactId>
-                <version>1.3.2</version>
+                <version>2.11.5</version>
             </dependency>
 
             <dependency>