fix CVE-2022-42889 (#922)

microsoft · Dec 15, 2022 · bf95fae · bf95fae
1 parent 221fdca
commit bf95fae
Show file tree

Hide file tree

Showing 6 changed files with 8 additions and 8 deletions.
diff --git a/jdtls.ext/com.microsoft.java.maven.plugin/.classpath b/jdtls.ext/com.microsoft.java.maven.plugin/.classpath
@@ -9,7 +9,7 @@
 	<classpathentry exported="true" kind="lib" path="lib/lucene-analyzers-common-5.5.5.jar"/>
 	<classpathentry exported="true" kind="lib" path="lib/okhttp-3.12.3.jar"/>
 	<classpathentry exported="true" kind="lib" path="lib/okio-1.15.0.jar"/>
-	<classpathentry exported="true" kind="lib" path="lib/commons-text-1.7.jar"/>
+	<classpathentry exported="true" kind="lib" path="lib/commons-text-1.10.0.jar"/>
 	<classpathentry exported="true" kind="lib" path="lib/plexus-utils-3.2.1.jar"/>
 	<classpathentry exported="true" kind="lib" path="lib/maven-resolver-api-1.1.0.jar"/>
 	<classpathentry exported="true" kind="lib" path="lib/maven-resolver-util-1.1.0.jar"/>

diff --git a/jdtls.ext/com.microsoft.java.maven.plugin/META-INF/MANIFEST.MF b/jdtls.ext/com.microsoft.java.maven.plugin/META-INF/MANIFEST.MF
@@ -2,7 +2,7 @@ Manifest-Version: 1.0
 Bundle-ManifestVersion: 2
 Bundle-Name: com.microsoft.java.maven
 Bundle-SymbolicName: com.microsoft.java.maven.plugin;singleton:=true
-Bundle-Version: 0.37.0
+Bundle-Version: 0.38.0
 Bundle-Activator: com.microsoft.java.maven.PluginActivator
 Bundle-RequiredExecutionEnvironment: JavaSE-17
 Import-Package: org.eclipse.jdt.core,
@@ -30,7 +30,7 @@ Bundle-ClassPath: .,
  lib/lucene-analyzers-common-5.5.5.jar,
  lib/okhttp-3.12.3.jar,
  lib/okio-1.15.0.jar,
- lib/commons-text-1.7.jar,
+ lib/commons-text-1.10.0.jar,
  lib/plexus-utils-3.2.1.jar,
  lib/maven-resolver-api-1.1.0.jar,
  lib/maven-resolver-util-1.1.0.jar,

diff --git a/jdtls.ext/com.microsoft.java.maven.plugin/build.properties b/jdtls.ext/com.microsoft.java.maven.plugin/build.properties
@@ -10,7 +10,7 @@ bin.includes = META-INF/,\
                lib/lucene-analyzers-common-5.5.5.jar,\
                lib/okhttp-3.12.3.jar,\
                lib/okio-1.15.0.jar,\
-               lib/commons-text-1.7.jar,\
+               lib/commons-text-1.10.0.jar,\
                lib/plexus-utils-3.2.1.jar,\
                lib/maven-resolver-api-1.1.0.jar,\
                lib/maven-resolver-util-1.1.0.jar,\

diff --git a/jdtls.ext/com.microsoft.java.maven.plugin/pom.xml b/jdtls.ext/com.microsoft.java.maven.plugin/pom.xml
@@ -4,7 +4,7 @@
 	<parent>
 		<groupId>com.microsoft.java.maven</groupId>
 		<artifactId>parent</artifactId>
-		<version>0.37.0</version>
+		<version>0.38.0</version>
 	</parent>
 	<artifactId>com.microsoft.java.maven.plugin</artifactId>
 	<packaging>eclipse-plugin</packaging>
@@ -81,7 +81,7 @@
 						<artifactItem>
 							<groupId>org.apache.commons</groupId>
 							<artifactId>commons-text</artifactId>
-							<version>1.7</version>
+							<version>1.10.0</version>
 						</artifactItem>
 						<artifactItem>
 							<groupId>org.codehaus.plexus</groupId>

diff --git a/jdtls.ext/pom.xml b/jdtls.ext/pom.xml
@@ -4,7 +4,7 @@
     <groupId>com.microsoft.java.maven</groupId>
     <artifactId>parent</artifactId>
     <name>${base.name} :: Parent</name>
-    <version>0.37.0</version>
+    <version>0.38.0</version>
     <packaging>pom</packaging>
     <properties>
         <base.name>JDTLS Maven Extension</base.name>

diff --git a/package.json b/package.json
@@ -65,7 +65,7 @@
   "main": "./dist/extension",
   "contributes": {
     "javaExtensions": [
-      "./jdtls.ext/com.microsoft.java.maven.plugin/target/com.microsoft.java.maven.plugin-0.37.0.jar"
+      "./jdtls.ext/com.microsoft.java.maven.plugin/target/com.microsoft.java.maven.plugin-0.38.0.jar"
     ],
     "commands": [
       {