Skip to content

Releases: exasol/row-level-security-lua

1.5.5 Improve error handling for extension

07 May 13:29
18829eb
Compare
Choose a tag to compare

This release improves error handling when creating a new Virtual Schema using the extension: the extension now checks if a schema with the same name exists and returns a helpful error message. This check is case-insensitive to be consistent with other virtual schemas.

Bugfix

  • #155: Improved error handling for creating Virtual Schema using the extension

Dependency Updates

Exasol Row Level Security (Lua)

Test Dependency Updates

  • Updated com.exasol:exasol-testcontainers:7.0.1 to 7.1.0
  • Updated com.exasol:extension-manager-integration-test-java:0.5.9 to 0.5.11
  • Updated org.slf4j:slf4j-jdk14:2.0.12 to 2.0.13

Extension

Compile Dependency Updates

  • Updated @exasol/extension-manager-interface:0.4.1 to 0.4.2

Development Dependency Updates

  • Updated typescript-eslint:^7.6.0 to ^7.8.0
  • Updated typescript:^5.4.4 to ^5.4.5

1.5.4 Fix CVE-2024-29025 in io.netty:netty-codec-http:jar:4.1.107.Final:test

11 Apr 07:28
5ae6440
Compare
Choose a tag to compare

This release fixes CVE-2024-29025 in io.netty:netty-codec-http:jar:4.1.107.Final:test.

Security

Dependency Updates

Exasol Row Level Security (Lua)

Test Dependency Updates

  • Updated com.exasol:exasol-jdbc:24.0.0 to 24.1.0
  • Updated com.exasol:extension-manager-integration-test-java:0.5.8 to 0.5.9

Plugin Dependency Updates

  • Updated com.exasol:project-keeper-maven-plugin:4.1.0 to 4.3.0
  • Updated org.apache.maven.plugins:maven-compiler-plugin:3.12.1 to 3.13.0
  • Updated org.jacoco:jacoco-maven-plugin:0.8.11 to 0.8.12
  • Updated org.sonarsource.scanner.maven:sonar-maven-plugin:3.10.0.2594 to 3.11.0.3922

Extension

Development Dependency Updates

  • Updated eslint:^8.54.0 to ^8.57.0
  • Updated ts-jest:^29.1.1 to ^29.1.2
  • Added @types/jest:^29.5.12
  • Added typescript-eslint:^7.6.0
  • Updated typescript:^5.2.2 to ^5.4.4
  • Updated ts-node:^10.9.1 to ^10.9.2
  • Updated esbuild:^0.19.6 to ^0.20.2
  • Removed @jest/globals:^29.7.0
  • Removed @types/node:^20.9.2
  • Removed @typescript-eslint/parser:^6.11.0
  • Removed @typescript-eslint/eslint-plugin:^6.11.0

1.5.3: Fixed CVE-2024-26308 and CVE-2024-25710 in test dependencies

14 Mar 12:16
b18018e
Compare
Choose a tag to compare

Summary

In this security release we fixed CVE-2024-26308 and CVE-2024-25710 by updating test dependencies.

CVE-2024-25710

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0.

References

CVE-2024-26308

Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26.

References

Security

Dependency Updates

Test Dependency Updates

  • Updated com.exasol:exasol-jdbc:7.1.20 to 24.0.0
  • Updated com.exasol:exasol-testcontainers:6.6.3 to 7.0.1
  • Updated com.exasol:extension-manager-integration-test-java:0.5.7 to 0.5.8
  • Updated com.exasol:hamcrest-resultset-matcher:1.6.2 to 1.6.5
  • Updated com.exasol:test-db-builder-java:3.5.2 to 3.5.4
  • Updated org.junit.jupiter:junit-jupiter-engine:5.10.1 to 5.10.2
  • Updated org.junit.jupiter:junit-jupiter-params:5.10.1 to 5.10.2
  • Updated org.slf4j:slf4j-jdk14:2.0.9 to 2.0.12
  • Updated org.testcontainers:junit-jupiter:1.19.2 to 1.19.7

Plugin Dependency Updates

  • Updated com.exasol:project-keeper-maven-plugin:2.9.16 to 4.1.0
  • Updated org.apache.maven.plugins:maven-compiler-plugin:3.11.0 to 3.12.1
  • Updated org.apache.maven.plugins:maven-failsafe-plugin:3.2.2 to 3.2.5
  • Updated org.apache.maven.plugins:maven-surefire-plugin:3.2.2 to 3.2.5
  • Added org.apache.maven.plugins:maven-toolchains-plugin:3.1.0
  • Updated org.codehaus.mojo:flatten-maven-plugin:1.5.0 to 1.6.0
  • Updated org.codehaus.mojo:versions-maven-plugin:2.16.1 to 2.16.2
  • Updated org.itsallcode:openfasttrace-maven-plugin:1.6.2 to 1.8.0

1.5.2: Fix CVE-2023-4043 in test dependency `org.eclipse.parsson:parsson`

20 Nov 15:42
5e7008f
Compare
Choose a tag to compare

Summary

This release fixes vulnerability CVE-2023-4043 in test dependency org.eclipse.parsson:parsson.

Security

Dependency Updates

Test Dependency Updates

  • Updated com.exasol:exasol-testcontainers:6.6.2 to 6.6.3
  • Updated com.exasol:extension-manager-integration-test-java:0.5.4 to 0.5.7
  • Updated com.exasol:hamcrest-resultset-matcher:1.6.1 to 1.6.2
  • Updated com.exasol:test-db-builder-java:3.5.1 to 3.5.2
  • Updated org.junit.jupiter:junit-jupiter-engine:5.10.0 to 5.10.1
  • Updated org.junit.jupiter:junit-jupiter-params:5.10.0 to 5.10.1
  • Updated org.testcontainers:junit-jupiter:1.19.1 to 1.19.2

Plugin Dependency Updates

  • Updated com.exasol:project-keeper-maven-plugin:2.9.14 to 2.9.16
  • Updated org.apache.maven.plugins:maven-failsafe-plugin:3.1.2 to 3.2.2
  • Updated org.apache.maven.plugins:maven-surefire-plugin:3.1.2 to 3.2.2

1.5.1: Fix CVE-2023-42503 and source schema switching

26 Oct 11:06
3e76939
Compare
Choose a tag to compare

Summary

In this release we updated the test dependency exasol-testcontainers to version 6.6.2 in order to update the transitive dependency org.apache.commons:commons-compress to 1.24.0. This fixes CVE-2023-42505.

We also fixed a bug that prevented users from switching the source schema with ALTER VIRTUAL SCHEMA ... SET SCHEMA_NAME=.

Features

Dependency Updates

Test Dependency Updates

  • Updated com.exasol:exasol-testcontainers:6.6.1 to 6.6.2
  • Updated com.exasol:extension-manager-integration-test-java:0.5.0 to 0.5.4
  • Updated com.exasol:hamcrest-resultset-matcher:1.6.0 to 1.6.1
  • Updated com.exasol:test-db-builder-java:3.5.0 to 3.5.1
  • Updated org.testcontainers:junit-jupiter:1.19.0 to 1.19.1

Plugin Dependency Updates

  • Updated com.exasol:error-code-crawler-maven-plugin:1.3.0 to 1.3.1
  • Updated com.exasol:project-keeper-maven-plugin:2.9.11 to 2.9.14
  • Updated org.apache.maven.plugins:maven-enforcer-plugin:3.4.0 to 3.4.1
  • Updated org.codehaus.mojo:versions-maven-plugin:2.16.0 to 2.16.1
  • Updated org.jacoco:jacoco-maven-plugin:0.8.10 to 0.8.11
  • Updated org.sonarsource.scanner.maven:sonar-maven-plugin:3.9.1.2184 to 3.10.0.2594

1.5.0: Add Extension

07 Sep 14:03
06bebd0
Compare
Choose a tag to compare

Summary

This release adds support for the Extension Manager.

Feature

  • #138: Added support for Extension Manager

Dependency Updates

Test Dependency Updates

  • Added com.exasol:extension-manager-integration-test-java:0.5.0
  • Updated com.exasol:test-db-builder-java:3.4.2 to 3.5.0
  • Updated org.junit.jupiter:junit-jupiter-engine:5.9.3 to 5.10.0
  • Updated org.junit.jupiter:junit-jupiter-params:5.9.3 to 5.10.0
  • Updated org.slf4j:slf4j-jdk14:2.0.7 to 2.0.9
  • Updated org.testcontainers:junit-jupiter:1.18.3 to 1.19.0

Plugin Dependency Updates

  • Updated com.exasol:project-keeper-maven-plugin:2.9.9 to 2.9.11
  • Updated org.apache.maven.plugins:maven-enforcer-plugin:3.3.0 to 3.4.0

1.4.1: Fix Issue With Integer Constants in `GROUP BY`

14 Jul 08:47
99addc4
Compare
Choose a tag to compare

Summary

This release fixes an issue with queries using DISTINCT with integer constants. The Exasol SQL processor turns DISTINCT <integer> into GROUP BY <integer> before push-down as an optimization. The adapter must not feed this back as Exasol interprets integers in GROUP BY clauses as column numbers which could lead to invalid results or the following error:

42000:Wrong column number. Too small value 0 as select list column reference in GROUP BY (smallest possible value is 1)

To fix this, Exasol VS now replaces integer constants in GROUP BY clauses with a constant string.

Please that you can still safely use GROUP BY <column-number> in your original query, since Exasol internally converts this to GROUP BY "<column-name>", so that the virtual schema adapter can tell both situations apart.

The release also adds integration tests using Exasol v8 to the CI build.

Bugfixes

  • #133: Fixed issue with integer constants in GROUP BY

Refactoring

  • #134: Added integration tests using Exasol v8 to CI build

Dependency Updates

Test Dependency Updates

  • Updated com.exasol:exasol-testcontainers:6.6.0 to 6.6.1
  • Updated org.slf4j:slf4j-jdk14:1.7.36 to 2.0.7

Plugin Dependency Updates

  • Updated com.exasol:error-code-crawler-maven-plugin:1.2.3 to 1.3.0
  • Updated com.exasol:project-keeper-maven-plugin:2.9.7 to 2.9.9
  • Updated org.apache.maven.plugins:maven-failsafe-plugin:3.0.0 to 3.1.2
  • Updated org.apache.maven.plugins:maven-surefire-plugin:3.0.0 to 3.1.2
  • Updated org.basepom.maven:duplicate-finder-maven-plugin:1.5.1 to 2.0.1
  • Updated org.codehaus.mojo:build-helper-maven-plugin:3.3.0 to 3.4.0
  • Updated org.codehaus.mojo:flatten-maven-plugin:1.4.1 to 1.5.0
  • Updated org.codehaus.mojo:versions-maven-plugin:2.15.0 to 2.16.0
  • Updated org.jacoco:jacoco-maven-plugin:0.8.9 to 0.8.10

1.4.0: Aggregate Functions

27 Jun 12:10
6cd0d05
Compare
Choose a tag to compare

Summary

This release is based on the latest versions of virtual-schema-common-lua and exasol-virtual-schema-common-lua, so it now supports aggregate functions.

Features

  • #129: Used EVSCL base library

Dependency Updates

Test Dependency Updates

  • Updated com.exasol:exasol-jdbc:7.1.19 to 7.1.20
  • Updated com.exasol:exasol-testcontainers:6.5.1 to 6.6.0
  • Updated com.exasol:hamcrest-resultset-matcher:1.5.3 to 1.6.0
  • Updated org.junit.jupiter:junit-jupiter-engine:5.9.2 to 5.9.3
  • Updated org.junit.jupiter:junit-jupiter-params:5.9.2 to 5.9.3
  • Updated org.testcontainers:junit-jupiter:1.17.6 to 1.18.3

Plugin Dependency Updates

  • Updated com.exasol:error-code-crawler-maven-plugin:1.2.2 to 1.2.3
  • Updated com.exasol:project-keeper-maven-plugin:2.9.6 to 2.9.7
  • Updated org.apache.maven.plugins:maven-compiler-plugin:3.10.1 to 3.11.0
  • Updated org.apache.maven.plugins:maven-enforcer-plugin:3.2.1 to 3.3.0
  • Updated org.apache.maven.plugins:maven-failsafe-plugin:3.0.0-M8 to 3.0.0
  • Updated org.apache.maven.plugins:maven-surefire-plugin:3.0.0-M8 to 3.0.0
  • Added org.basepom.maven:duplicate-finder-maven-plugin:1.5.1
  • Updated org.codehaus.mojo:flatten-maven-plugin:1.3.0 to 1.4.1
  • Updated org.codehaus.mojo:versions-maven-plugin:2.14.2 to 2.15.0
  • Updated org.itsallcode:openfasttrace-maven-plugin:1.6.1 to 1.6.2
  • Updated org.jacoco:jacoco-maven-plugin:0.8.8 to 0.8.9

1.3.0: Remove decommissioned maven.exasol.com repository

30 Mar 05:45
f6cc849
Compare
Choose a tag to compare

Summary

This release removes the decommissioned maven.exasol.com repository to fix the build.

Features

  • #121: Added tests to verify version references

Bugfixes

  • #127: Removed decommissioned maven.exasol.com repository

Dependency Updates

Test Dependency Updates

  • Updated com.exasol:exasol-jdbc:7.1.10 to 7.1.19
  • Updated com.exasol:exasol-testcontainers:6.1.1 to 6.5.1
  • Updated com.exasol:hamcrest-resultset-matcher:1.5.1 to 1.5.3
  • Updated com.exasol:maven-project-version-getter:1.1.0 to 1.2.0
  • Updated com.exasol:test-db-builder-java:3.3.2 to 3.4.2
  • Updated org.junit.jupiter:junit-jupiter-engine:5.8.2 to 5.9.2
  • Updated org.junit.jupiter:junit-jupiter-params:5.8.2 to 5.9.2
  • Updated org.testcontainers:junit-jupiter:1.17.2 to 1.17.6

Plugin Dependency Updates

  • Updated com.exasol:error-code-crawler-maven-plugin:1.1.1 to 1.2.2
  • Updated com.exasol:project-keeper-maven-plugin:2.4.6 to 2.9.6
  • Updated io.github.zlika:reproducible-build-maven-plugin:0.15 to 0.16
  • Updated org.apache.maven.plugins:maven-enforcer-plugin:3.0.0 to 3.2.1
  • Updated org.apache.maven.plugins:maven-failsafe-plugin:3.0.0-M5 to 3.0.0-M8
  • Updated org.apache.maven.plugins:maven-jar-plugin:3.2.2 to 3.3.0
  • Updated org.apache.maven.plugins:maven-surefire-plugin:3.0.0-M5 to 3.0.0-M8
  • Updated org.codehaus.mojo:exec-maven-plugin:3.0.0 to 3.1.0
  • Updated org.codehaus.mojo:flatten-maven-plugin:1.2.7 to 1.3.0
  • Updated org.codehaus.mojo:versions-maven-plugin:2.10.0 to 2.14.2
  • Updated org.itsallcode:openfasttrace-maven-plugin:1.5.0 to 1.6.1

1.2.0 LIMIT, GROUP BY

08 Jun 12:00
9929dfe
Compare
Choose a tag to compare

Summary

RLS (Lua) version 1.2.0 brings support for LIMIT with an optional offset and for GROUP BY clauses.

Note that this version requires Exasol 7.1.10 or later to run stable, because earlier versions had a problem in handling Lua's pcall and xpcall functions. Please upgrade your database before running RLS!

We also added validation for Virtual Schema properties to all requests that use properties.

Know Issues

Push-down of aggregate functions is not yet implemented. We will add that in a future version (issue #120).

Features

  • #118: Added support for LIMIT and GROUP BY via update of virtual-schema-common-lua

Refactoring

  • #122: Applied new object-oriented style

Features

  • #118: Added support for ORDER BY, LIMIT more scalar functions

Dependency Updates

Test Dependency Updates

  • Updated com.exasol:exasol-jdbc:7.1.7 to 7.1.10
  • Updated com.exasol:test-db-builder-java:3.3.1 to 3.3.2
  • Updated org.testcontainers:junit-jupiter:1.17.1 to 1.17.2

Plugin Dependency Updates

  • Updated com.exasol:error-code-crawler-maven-plugin:0.1.1 to 1.1.1
  • Updated com.exasol:project-keeper-maven-plugin:2.3.0 to 2.4.6
  • Updated org.apache.maven.plugins:maven-compiler-plugin:3.9.0 to 3.10.1
  • Updated org.apache.maven.plugins:maven-jar-plugin:3.2.0 to 3.2.2
  • Updated org.codehaus.mojo:build-helper-maven-plugin:3.2.0 to 3.3.0
  • Updated org.codehaus.mojo:versions-maven-plugin:2.8.1 to 2.10.0
  • Updated org.jacoco:jacoco-maven-plugin:0.8.7 to 0.8.8
  • Updated org.sonatype.ossindex.maven:ossindex-maven-plugin:3.1.0 to 3.2.0