Fix CVE-2023-3635

circleci · Oct 4, 2023 · 8b1b1dc · 8b1b1dc
1 parent 8875f16
commit 8b1b1dc
Show file tree

Hide file tree

Showing 6 changed files with 13 additions and 6 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,9 @@
+Version 0.8.2 (October 3, 2023)
+================================
+
+* [FIXED](https://github.com/circleci/analytics-clj/pull/21): Update com.segment.analytics.java/analytics to version 3.5.0
+* [FIXED](https://github.com/circleci/analytics-clj/pull/21): Force update okio-jvm to version 3.4.0 fix CVE-2023-3635
+
 Version 0.8.1 (September 1, 2022)
 ================================
 

diff --git a/README.md b/README.md
@@ -10,7 +10,7 @@ For full documentation on the Segment.io 2.x Java client, see [analytics-java](h
 
 ## Installation
 
-`[circleci/analytics-clj "0.8.1"]`
+`[circleci/analytics-clj "0.8.2"]`
 
 ## Usage
 

diff --git a/docs/circleci.analytics-clj.core.html b/docs/circleci.analytics-clj.core.html
@@ -17,4 +17,4 @@
 extra information about the screen being viewed.</pre></div></div><div class="public anchor" id="var-shutdown"><h3>shutdown</h3><h4 class="added">added in 0.4.0</h4><div class="usage"><code>(shutdown analytics)</code></div><div class="doc"><pre class="plaintext">Stops this instance from processing further requests.
 </pre></div></div><div class="public anchor" id="var-track"><h3>track</h3><h4 class="added">added in 0.4.0</h4><div class="usage"><code>(track analytics user-id event)</code><code>(track analytics user-id event properties)</code><code>(track analytics user-id event properties options)</code></div><div class="doc"><pre class="plaintext">`track` lets you record the actions your users perform.
 Every action triggers what we call an “event”, which can
-also have associated properties.</pre></div></div></div></body></html>
+also have associated properties.</pre></div></div></div></body></html>
diff --git a/docs/index.html b/docs/index.html
@@ -1,3 +1,3 @@
 <!DOCTYPE html PUBLIC ""
     "">
-<html><head><meta charset="UTF-8" /><title>Analytics-clj 0.8.1</title><link rel="stylesheet" type="text/css" href="css/default.css" /><link rel="stylesheet" type="text/css" href="css/highlight.css" /><script type="text/javascript" src="js/highlight.min.js"></script><script type="text/javascript" src="js/jquery.min.js"></script><script type="text/javascript" src="js/page_effects.js"></script><script>hljs.initHighlightingOnLoad();</script></head><body><div id="header"><h2>Generated by <a href="https://github.com/weavejester/codox">Codox</a></h2><h1><a href="index.html"><span class="project-title"><span class="project-name">Analytics-clj</span> <span class="project-version">0.8.1</span></span></a></h1></div><div class="sidebar primary"><h3 class="no-link"><span class="inner">Project</span></h3><ul class="index-link"><li class="depth-1 current"><a href="index.html"><div class="inner">Index</div></a></li></ul><h3 class="no-link"><span class="inner">Namespaces</span></h3><ul><li class="depth-1 "><a href="circleci.analytics-clj.core.html"><div class="inner"><span>circleci.analytics-clj.core</span></div></a></li></ul></div><div class="namespace-index" id="content"><h1><span class="project-title"><span class="project-name">Analytics-clj</span> <span class="project-version">0.8.1</span></span></h1><h5 class="license">Released under the <a href="http://www.eclipse.org/legal/epl-v10.html">Eclipse Public License</a></h5><div class="doc"><p>Idiomatic Clojure wrapper for the Segment.io 2.x Java client.</p></div><h2>Installation</h2><p>To install, add the following dependency to your project or build file:</p><pre class="deps">[circleci/analytics-clj "0.8.1"]</pre><h2>Namespaces</h2><div class="namespace"><h3><a href="circleci.analytics-clj.core.html">circleci.analytics-clj.core</a></h3><div class="doc"><pre class="plaintext"></pre></div><div class="index"><p>Public variables and functions:</p><ul><li> <a href="circleci.analytics-clj.core.html#var-alias">alias</a> </li><li> <a href="circleci.analytics-clj.core.html#var-enqueue">enqueue</a> </li><li> <a href="circleci.analytics-clj.core.html#var-flush">flush</a> </li><li> <a href="circleci.analytics-clj.core.html#var-group">group</a> </li><li> <a href="circleci.analytics-clj.core.html#var-identify">identify</a> </li><li> <a href="circleci.analytics-clj.core.html#var-initialize">initialize</a> </li><li> <a href="circleci.analytics-clj.core.html#var-page">page</a> </li><li> <a href="circleci.analytics-clj.core.html#var-screen">screen</a> </li><li> <a href="circleci.analytics-clj.core.html#var-shutdown">shutdown</a> </li><li> <a href="circleci.analytics-clj.core.html#var-track">track</a> </li></ul></div></div></div></body></html>
+<html><head><meta charset="UTF-8" /><title>Analytics-clj 0.8.2</title><link rel="stylesheet" type="text/css" href="css/default.css" /><link rel="stylesheet" type="text/css" href="css/highlight.css" /><script type="text/javascript" src="js/highlight.min.js"></script><script type="text/javascript" src="js/jquery.min.js"></script><script type="text/javascript" src="js/page_effects.js"></script><script>hljs.initHighlightingOnLoad();</script></head><body><div id="header"><h2>Generated by <a href="https://github.com/weavejester/codox">Codox</a></h2><h1><a href="index.html"><span class="project-title"><span class="project-name">Analytics-clj</span> <span class="project-version">0.8.2</span></span></a></h1></div><div class="sidebar primary"><h3 class="no-link"><span class="inner">Project</span></h3><ul class="index-link"><li class="depth-1 current"><a href="index.html"><div class="inner">Index</div></a></li></ul><h3 class="no-link"><span class="inner">Namespaces</span></h3><ul><li class="depth-1 "><a href="circleci.analytics-clj.core.html"><div class="inner"><span>circleci.analytics-clj.core</span></div></a></li></ul></div><div class="namespace-index" id="content"><h1><span class="project-title"><span class="project-name">Analytics-clj</span> <span class="project-version">0.8.2</span></span></h1><h5 class="license">Released under the <a href="http://www.eclipse.org/legal/epl-v10.html">Eclipse Public License</a></h5><div class="doc"><p>Idiomatic Clojure wrapper for the Segment.io 2.x Java client.</p></div><h2>Installation</h2><p>To install, add the following dependency to your project or build file:</p><pre class="deps">[circleci/analytics-clj "0.8.2"]</pre><h2>Namespaces</h2><div class="namespace"><h3><a href="circleci.analytics-clj.core.html">circleci.analytics-clj.core</a></h3><div class="doc"><pre class="plaintext"></pre></div><div class="index"><p>Public variables and functions:</p><ul><li> <a href="circleci.analytics-clj.core.html#var-alias">alias</a> </li><li> <a href="circleci.analytics-clj.core.html#var-enqueue">enqueue</a> </li><li> <a href="circleci.analytics-clj.core.html#var-flush">flush</a> </li><li> <a href="circleci.analytics-clj.core.html#var-group">group</a> </li><li> <a href="circleci.analytics-clj.core.html#var-identify">identify</a> </li><li> <a href="circleci.analytics-clj.core.html#var-initialize">initialize</a> </li><li> <a href="circleci.analytics-clj.core.html#var-page">page</a> </li><li> <a href="circleci.analytics-clj.core.html#var-screen">screen</a> </li><li> <a href="circleci.analytics-clj.core.html#var-shutdown">shutdown</a> </li><li> <a href="circleci.analytics-clj.core.html#var-track">track</a> </li></ul></div></div></div></body></html>
diff --git a/project.clj b/project.clj
@@ -1,10 +1,11 @@
-(defproject circleci/analytics-clj "0.8.1"
+(defproject circleci/analytics-clj "0.8.2"
   :description "Idiomatic Clojure wrapper for the Segment.io 2.x Java client"
   :url "https://github.com/circleci/analytics-clj"
   :license {:name "Eclipse Public License"
             :url "http://www.eclipse.org/legal/epl-v10.html"}
   :dependencies [[org.clojure/clojure "1.8.0"]
-                 [com.segment.analytics.java/analytics "3.3.1"]]
+                 [com.squareup.okio/okio-jvm "3.4.0"]
+                 [com.segment.analytics.java/analytics "3.5.0"]]
   :profiles {:dev {:dependencies [[bond "0.2.6"]]}}
   :plugins [[lein-ancient "0.6.15"]
             [lein-codox "0.10.7"]]

diff --git a/src/circleci/analytics_clj/common.clj b/src/circleci/analytics_clj/common.clj
@@ -3,7 +3,7 @@
             [circleci.analytics-clj.utils :refer [string-keys]]))
 
 (def ^:private ctx {"library" {"name" "analytics-clj"
-                               "version" "0.8.1"}})
+                               "version" "0.8.2"}})
 
 (defn common-fields
   "The `MessageBuilder` interface has a set of fields common to all messages.