Releases: exasol/row-level-security-lua
1.5.5 Improve error handling for extension
This release improves error handling when creating a new Virtual Schema using the extension: the extension now checks if a schema with the same name exists and returns a helpful error message. This check is case-insensitive to be consistent with other virtual schemas.
Bugfix
- #155: Improved error handling for creating Virtual Schema using the extension
Dependency Updates
Exasol Row Level Security (Lua)
Test Dependency Updates
- Updated
com.exasol:exasol-testcontainers:7.0.1
to7.1.0
- Updated
com.exasol:extension-manager-integration-test-java:0.5.9
to0.5.11
- Updated
org.slf4j:slf4j-jdk14:2.0.12
to2.0.13
Extension
Compile Dependency Updates
- Updated
@exasol/extension-manager-interface:0.4.1
to0.4.2
Development Dependency Updates
- Updated
typescript-eslint:^7.6.0
to^7.8.0
- Updated
typescript:^5.4.4
to^5.4.5
1.5.4 Fix CVE-2024-29025 in io.netty:netty-codec-http:jar:4.1.107.Final:test
This release fixes CVE-2024-29025 in io.netty:netty-codec-http:jar:4.1.107.Final:test
.
Security
- #149: Fixed CVE-2024-29025 in
io.netty:netty-codec-http:jar:4.1.107.Final:test
Dependency Updates
Exasol Row Level Security (Lua)
Test Dependency Updates
- Updated
com.exasol:exasol-jdbc:24.0.0
to24.1.0
- Updated
com.exasol:extension-manager-integration-test-java:0.5.8
to0.5.9
Plugin Dependency Updates
- Updated
com.exasol:project-keeper-maven-plugin:4.1.0
to4.3.0
- Updated
org.apache.maven.plugins:maven-compiler-plugin:3.12.1
to3.13.0
- Updated
org.jacoco:jacoco-maven-plugin:0.8.11
to0.8.12
- Updated
org.sonarsource.scanner.maven:sonar-maven-plugin:3.10.0.2594
to3.11.0.3922
Extension
Development Dependency Updates
- Updated
eslint:^8.54.0
to^8.57.0
- Updated
ts-jest:^29.1.1
to^29.1.2
- Added
@types/jest:^29.5.12
- Added
typescript-eslint:^7.6.0
- Updated
typescript:^5.2.2
to^5.4.4
- Updated
ts-node:^10.9.1
to^10.9.2
- Updated
esbuild:^0.19.6
to^0.20.2
- Removed
@jest/globals:^29.7.0
- Removed
@types/node:^20.9.2
- Removed
@typescript-eslint/parser:^6.11.0
- Removed
@typescript-eslint/eslint-plugin:^6.11.0
1.5.3: Fixed CVE-2024-26308 and CVE-2024-25710 in test dependencies
Summary
In this security release we fixed CVE-2024-26308 and CVE-2024-25710 by updating test dependencies.
CVE-2024-25710
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0.
References
- https://ossindex.sonatype.org/vulnerability/CVE-2024-25710?component-type=maven&component-name=org.apache.commons%2Fcommons-compress&utm_source=ossindex-client&utm_medium=integration&utm_content=1.8.1
- http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-25710
- https://lists.apache.org/thread/cz8qkcwphy4cx8gltn932ln51cbtq6kf
CVE-2024-26308
Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26.
References
- https://ossindex.sonatype.org/vulnerability/CVE-2024-26308?component-type=maven&component-name=org.apache.commons%2Fcommons-compress&utm_source=ossindex-client&utm_medium=integration&utm_content=1.8.1
- http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-26308
- https://lists.apache.org/thread/ch5yo2d21p7vlqrhll9b17otbyq4npfg
- https://www.openwall.com/lists/oss-security/2024/02/19/2
Security
- #146: Fixed CVE-2024-25710 by updating test dependency
- #147: Fixed CVE-2024-26308 by updating test dependency
Dependency Updates
Test Dependency Updates
- Updated
com.exasol:exasol-jdbc:7.1.20
to24.0.0
- Updated
com.exasol:exasol-testcontainers:6.6.3
to7.0.1
- Updated
com.exasol:extension-manager-integration-test-java:0.5.7
to0.5.8
- Updated
com.exasol:hamcrest-resultset-matcher:1.6.2
to1.6.5
- Updated
com.exasol:test-db-builder-java:3.5.2
to3.5.4
- Updated
org.junit.jupiter:junit-jupiter-engine:5.10.1
to5.10.2
- Updated
org.junit.jupiter:junit-jupiter-params:5.10.1
to5.10.2
- Updated
org.slf4j:slf4j-jdk14:2.0.9
to2.0.12
- Updated
org.testcontainers:junit-jupiter:1.19.2
to1.19.7
Plugin Dependency Updates
- Updated
com.exasol:project-keeper-maven-plugin:2.9.16
to4.1.0
- Updated
org.apache.maven.plugins:maven-compiler-plugin:3.11.0
to3.12.1
- Updated
org.apache.maven.plugins:maven-failsafe-plugin:3.2.2
to3.2.5
- Updated
org.apache.maven.plugins:maven-surefire-plugin:3.2.2
to3.2.5
- Added
org.apache.maven.plugins:maven-toolchains-plugin:3.1.0
- Updated
org.codehaus.mojo:flatten-maven-plugin:1.5.0
to1.6.0
- Updated
org.codehaus.mojo:versions-maven-plugin:2.16.1
to2.16.2
- Updated
org.itsallcode:openfasttrace-maven-plugin:1.6.2
to1.8.0
1.5.2: Fix CVE-2023-4043 in test dependency `org.eclipse.parsson:parsson`
Summary
This release fixes vulnerability CVE-2023-4043 in test dependency org.eclipse.parsson:parsson
.
Security
- #144: Fixed CVE-2023-4043 in test dependency
org.eclipse.parsson:parsson
Dependency Updates
Test Dependency Updates
- Updated
com.exasol:exasol-testcontainers:6.6.2
to6.6.3
- Updated
com.exasol:extension-manager-integration-test-java:0.5.4
to0.5.7
- Updated
com.exasol:hamcrest-resultset-matcher:1.6.1
to1.6.2
- Updated
com.exasol:test-db-builder-java:3.5.1
to3.5.2
- Updated
org.junit.jupiter:junit-jupiter-engine:5.10.0
to5.10.1
- Updated
org.junit.jupiter:junit-jupiter-params:5.10.0
to5.10.1
- Updated
org.testcontainers:junit-jupiter:1.19.1
to1.19.2
Plugin Dependency Updates
- Updated
com.exasol:project-keeper-maven-plugin:2.9.14
to2.9.16
- Updated
org.apache.maven.plugins:maven-failsafe-plugin:3.1.2
to3.2.2
- Updated
org.apache.maven.plugins:maven-surefire-plugin:3.1.2
to3.2.2
1.5.1: Fix CVE-2023-42503 and source schema switching
Summary
In this release we updated the test dependency exasol-testcontainers
to version 6.6.2 in order to update the transitive dependency org.apache.commons:commons-compress
to 1.24.0. This fixes CVE-2023-42505.
We also fixed a bug that prevented users from switching the source schema with ALTER VIRTUAL SCHEMA ... SET SCHEMA_NAME=
.
Features
- #136: Fixed source schema switching
- #140: Updated test dependency to fix CVE-2023-42505
Dependency Updates
Test Dependency Updates
- Updated
com.exasol:exasol-testcontainers:6.6.1
to6.6.2
- Updated
com.exasol:extension-manager-integration-test-java:0.5.0
to0.5.4
- Updated
com.exasol:hamcrest-resultset-matcher:1.6.0
to1.6.1
- Updated
com.exasol:test-db-builder-java:3.5.0
to3.5.1
- Updated
org.testcontainers:junit-jupiter:1.19.0
to1.19.1
Plugin Dependency Updates
- Updated
com.exasol:error-code-crawler-maven-plugin:1.3.0
to1.3.1
- Updated
com.exasol:project-keeper-maven-plugin:2.9.11
to2.9.14
- Updated
org.apache.maven.plugins:maven-enforcer-plugin:3.4.0
to3.4.1
- Updated
org.codehaus.mojo:versions-maven-plugin:2.16.0
to2.16.1
- Updated
org.jacoco:jacoco-maven-plugin:0.8.10
to0.8.11
- Updated
org.sonarsource.scanner.maven:sonar-maven-plugin:3.9.1.2184
to3.10.0.2594
1.5.0: Add Extension
Summary
This release adds support for the Extension Manager.
Feature
- #138: Added support for Extension Manager
Dependency Updates
Test Dependency Updates
- Added
com.exasol:extension-manager-integration-test-java:0.5.0
- Updated
com.exasol:test-db-builder-java:3.4.2
to3.5.0
- Updated
org.junit.jupiter:junit-jupiter-engine:5.9.3
to5.10.0
- Updated
org.junit.jupiter:junit-jupiter-params:5.9.3
to5.10.0
- Updated
org.slf4j:slf4j-jdk14:2.0.7
to2.0.9
- Updated
org.testcontainers:junit-jupiter:1.18.3
to1.19.0
Plugin Dependency Updates
- Updated
com.exasol:project-keeper-maven-plugin:2.9.9
to2.9.11
- Updated
org.apache.maven.plugins:maven-enforcer-plugin:3.3.0
to3.4.0
1.4.1: Fix Issue With Integer Constants in `GROUP BY`
Summary
This release fixes an issue with queries using DISTINCT
with integer constants. The Exasol SQL processor turns DISTINCT <integer>
into GROUP BY <integer>
before push-down as an optimization. The adapter must not feed this back as Exasol interprets integers in GROUP BY
clauses as column numbers which could lead to invalid results or the following error:
42000:Wrong column number. Too small value 0 as select list column reference in GROUP BY (smallest possible value is 1)
To fix this, Exasol VS now replaces integer constants in GROUP BY
clauses with a constant string.
Please that you can still safely use GROUP BY <column-number>
in your original query, since Exasol internally converts this to GROUP BY "<column-name>"
, so that the virtual schema adapter can tell both situations apart.
The release also adds integration tests using Exasol v8 to the CI build.
Bugfixes
- #133: Fixed issue with integer constants in
GROUP BY
Refactoring
- #134: Added integration tests using Exasol v8 to CI build
Dependency Updates
Test Dependency Updates
- Updated
com.exasol:exasol-testcontainers:6.6.0
to6.6.1
- Updated
org.slf4j:slf4j-jdk14:1.7.36
to2.0.7
Plugin Dependency Updates
- Updated
com.exasol:error-code-crawler-maven-plugin:1.2.3
to1.3.0
- Updated
com.exasol:project-keeper-maven-plugin:2.9.7
to2.9.9
- Updated
org.apache.maven.plugins:maven-failsafe-plugin:3.0.0
to3.1.2
- Updated
org.apache.maven.plugins:maven-surefire-plugin:3.0.0
to3.1.2
- Updated
org.basepom.maven:duplicate-finder-maven-plugin:1.5.1
to2.0.1
- Updated
org.codehaus.mojo:build-helper-maven-plugin:3.3.0
to3.4.0
- Updated
org.codehaus.mojo:flatten-maven-plugin:1.4.1
to1.5.0
- Updated
org.codehaus.mojo:versions-maven-plugin:2.15.0
to2.16.0
- Updated
org.jacoco:jacoco-maven-plugin:0.8.9
to0.8.10
1.4.0: Aggregate Functions
Summary
This release is based on the latest versions of virtual-schema-common-lua
and exasol-virtual-schema-common-lua
, so it now supports aggregate functions.
Features
- #129: Used EVSCL base library
Dependency Updates
Test Dependency Updates
- Updated
com.exasol:exasol-jdbc:7.1.19
to7.1.20
- Updated
com.exasol:exasol-testcontainers:6.5.1
to6.6.0
- Updated
com.exasol:hamcrest-resultset-matcher:1.5.3
to1.6.0
- Updated
org.junit.jupiter:junit-jupiter-engine:5.9.2
to5.9.3
- Updated
org.junit.jupiter:junit-jupiter-params:5.9.2
to5.9.3
- Updated
org.testcontainers:junit-jupiter:1.17.6
to1.18.3
Plugin Dependency Updates
- Updated
com.exasol:error-code-crawler-maven-plugin:1.2.2
to1.2.3
- Updated
com.exasol:project-keeper-maven-plugin:2.9.6
to2.9.7
- Updated
org.apache.maven.plugins:maven-compiler-plugin:3.10.1
to3.11.0
- Updated
org.apache.maven.plugins:maven-enforcer-plugin:3.2.1
to3.3.0
- Updated
org.apache.maven.plugins:maven-failsafe-plugin:3.0.0-M8
to3.0.0
- Updated
org.apache.maven.plugins:maven-surefire-plugin:3.0.0-M8
to3.0.0
- Added
org.basepom.maven:duplicate-finder-maven-plugin:1.5.1
- Updated
org.codehaus.mojo:flatten-maven-plugin:1.3.0
to1.4.1
- Updated
org.codehaus.mojo:versions-maven-plugin:2.14.2
to2.15.0
- Updated
org.itsallcode:openfasttrace-maven-plugin:1.6.1
to1.6.2
- Updated
org.jacoco:jacoco-maven-plugin:0.8.8
to0.8.9
1.3.0: Remove decommissioned maven.exasol.com repository
Summary
This release removes the decommissioned maven.exasol.com
repository to fix the build.
Features
- #121: Added tests to verify version references
Bugfixes
- #127: Removed decommissioned maven.exasol.com repository
Dependency Updates
Test Dependency Updates
- Updated
com.exasol:exasol-jdbc:7.1.10
to7.1.19
- Updated
com.exasol:exasol-testcontainers:6.1.1
to6.5.1
- Updated
com.exasol:hamcrest-resultset-matcher:1.5.1
to1.5.3
- Updated
com.exasol:maven-project-version-getter:1.1.0
to1.2.0
- Updated
com.exasol:test-db-builder-java:3.3.2
to3.4.2
- Updated
org.junit.jupiter:junit-jupiter-engine:5.8.2
to5.9.2
- Updated
org.junit.jupiter:junit-jupiter-params:5.8.2
to5.9.2
- Updated
org.testcontainers:junit-jupiter:1.17.2
to1.17.6
Plugin Dependency Updates
- Updated
com.exasol:error-code-crawler-maven-plugin:1.1.1
to1.2.2
- Updated
com.exasol:project-keeper-maven-plugin:2.4.6
to2.9.6
- Updated
io.github.zlika:reproducible-build-maven-plugin:0.15
to0.16
- Updated
org.apache.maven.plugins:maven-enforcer-plugin:3.0.0
to3.2.1
- Updated
org.apache.maven.plugins:maven-failsafe-plugin:3.0.0-M5
to3.0.0-M8
- Updated
org.apache.maven.plugins:maven-jar-plugin:3.2.2
to3.3.0
- Updated
org.apache.maven.plugins:maven-surefire-plugin:3.0.0-M5
to3.0.0-M8
- Updated
org.codehaus.mojo:exec-maven-plugin:3.0.0
to3.1.0
- Updated
org.codehaus.mojo:flatten-maven-plugin:1.2.7
to1.3.0
- Updated
org.codehaus.mojo:versions-maven-plugin:2.10.0
to2.14.2
- Updated
org.itsallcode:openfasttrace-maven-plugin:1.5.0
to1.6.1
1.2.0 LIMIT, GROUP BY
Summary
RLS (Lua) version 1.2.0 brings support for LIMIT
with an optional offset and for GROUP BY
clauses.
Note that this version requires Exasol 7.1.10 or later to run stable, because earlier versions had a problem in handling Lua's pcall
and xpcall
functions. Please upgrade your database before running RLS!
We also added validation for Virtual Schema properties to all requests that use properties.
Know Issues
Push-down of aggregate functions is not yet implemented. We will add that in a future version (issue #120).
Features
- #118: Added support for
LIMIT
andGROUP BY
via update ofvirtual-schema-common-lua
Refactoring
- #122: Applied new object-oriented style
Features
- #118: Added support for
ORDER BY
,LIMIT
more scalar functions
Dependency Updates
Test Dependency Updates
- Updated
com.exasol:exasol-jdbc:7.1.7
to7.1.10
- Updated
com.exasol:test-db-builder-java:3.3.1
to3.3.2
- Updated
org.testcontainers:junit-jupiter:1.17.1
to1.17.2
Plugin Dependency Updates
- Updated
com.exasol:error-code-crawler-maven-plugin:0.1.1
to1.1.1
- Updated
com.exasol:project-keeper-maven-plugin:2.3.0
to2.4.6
- Updated
org.apache.maven.plugins:maven-compiler-plugin:3.9.0
to3.10.1
- Updated
org.apache.maven.plugins:maven-jar-plugin:3.2.0
to3.2.2
- Updated
org.codehaus.mojo:build-helper-maven-plugin:3.2.0
to3.3.0
- Updated
org.codehaus.mojo:versions-maven-plugin:2.8.1
to2.10.0
- Updated
org.jacoco:jacoco-maven-plugin:0.8.7
to0.8.8
- Updated
org.sonatype.ossindex.maven:ossindex-maven-plugin:3.1.0
to3.2.0