[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249966

 
 

909

 
 

195636

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

SUSE-SU-2024:1304-1 -- SLES maven-surefire

ID: oval:org.secpod.oval:def:89051762Date: (C)2024-04-26   (M)2024-04-26
Class: PATCHFamily: unix




This update for eclipse, maven-surefire, tycho fixes the following issues: eclipse received the following security fix: * CVE-2023-4218: Fixed a bug where parsing files with xml content laeds to XXE attacks. maven-sunfire was updated from version 2.22.0 to 2.22.2: * Changes in version 2.22.2: * Bugs fixed: * Fixed JUnit Runner that writes to System.out corrupts Surefire's STDOUT when using JUnit's Vintage Engine * Changes in version 2.22.1: * Bugs fixed: * Fixed Surefire unable to run testng suites in parallel * Fixed Git wrongly considering PNG files as changed when there is no change * Fixed the surefire XSD published on maven site lacking of some rerun element * Fixed XML Report elements rerunError, rerunFailure, flakyFailure, flakyError * Fixed overriding platform version through project/plugin dependencies * Fixed mixed up characters in standard output * Logs in Parallel Tests are mixed up when `forkMode=never` or `forkCount=0` * MIME type for javascript is now officially application/javascript * Improvements: * Elapsed time in XML Report should satisfy pattern in XSD. * Fix old test resources TEST-*.xml in favor of continuing with SUREFIRE-1550 * Nil element 'failureMessage' in failsafe-summary.xml should have self closed tag * Removed obsolete module `surefire-setup-integration-tests` * Support Java 11 * Surefire should support parameterized reportsDirectory * Dependency upgrades: * Upgraded maven-plugins parent to version 32 * Upgraded maven-plugins parent to version 33 tycho received the following bug fixes: * Fixed build against maven-surefire 2.22.1 and newer * Fixed build against newer plexus-compiler * Fixed issues with plexus-archiver 4.4.0 and newer * Require explicitely artifacts that will not be required automatically any more

Platform:
SUSE Linux Enterprise Desktop 15 SP4
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15 SP2
SUSE Linux Enterprise Server 15 SP3
Product:
maven-surefire
Reference:
SUSE-SU-2024:1304-1
CVE-2023-4218
CVE    1
CVE-2023-4218
CPE    4
cpe:/o:suse:suse_linux_enterprise_server:15:sp4
cpe:/o:suse:suse_linux_enterprise_server:15:sp3
cpe:/o:suse:suse_linux_enterprise_server:15:sp2
cpe:/o:suse:suse_linux_enterprise_desktop:15:sp4
...

© SecPod Technologies