diff --git a/CHANGELOG.md b/CHANGELOG.md index 5c0bc23ceb..1708470a89 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,6 +1,9 @@ # Changelog -## 13.5.1 (unreleased) +## 13.5.2 (unreleased) + +## 13.5.1 (2024-10-28) +* Fix CVE-2024-49771: Potential Path Traversal Vulnerability ## 13.5.0 (2024-10-17) * Added support for reading and writing Resource Role Assignments for Primavera schedules. The `Resource.getRoleAssignments()` method retrieves a map representing the roles a resource is assigned to, along with the skill level for each assignment. The `Resource.addRoleAssignment()` and `Resource.removeRoleAssignment()` methods allow role assignments to be added and removed. diff --git a/build.xml b/build.xml index 8c88e3e97d..b3ff944e31 100644 --- a/build.xml +++ b/build.xml @@ -7,7 +7,7 @@ - + diff --git a/pom.tests.xml b/pom.tests.xml index 882e8d1d0a..80ddc01542 100644 --- a/pom.tests.xml +++ b/pom.tests.xml @@ -7,7 +7,7 @@ 4.0.0 net.sf.mpxj mpxj-tests - 13.5.0 + 13.5.1 MPXJ Tests diff --git a/pom.xml b/pom.xml index bd4f935d92..4abf2e92b5 100644 --- a/pom.xml +++ b/pom.xml @@ -7,7 +7,7 @@ 4.0.0 net.sf.mpxj mpxj - 13.5.0 + 13.5.1 MPXJ http://mpxj.org diff --git a/src.net/samples/MpxjConvert/Properties/AssemblyInfo.cs b/src.net/samples/MpxjConvert/Properties/AssemblyInfo.cs index 2a7aef7840..c54cf15573 100644 --- a/src.net/samples/MpxjConvert/Properties/AssemblyInfo.cs +++ b/src.net/samples/MpxjConvert/Properties/AssemblyInfo.cs @@ -31,6 +31,6 @@ // // You can specify all the values or you can default the Build and Revision Numbers // by using the '*' as shown below: -// [assembly: AssemblyVersion("13.5.0.0")] -[assembly: AssemblyVersion("13.5.0.0")] -[assembly: AssemblyFileVersion("13.5.0.0")] +// [assembly: AssemblyVersion("13.5.1.0")] +[assembly: AssemblyVersion("13.5.1.0")] +[assembly: AssemblyFileVersion("13.5.1.0")] diff --git a/src.net/samples/MpxjCreate/Properties/AssemblyInfo.cs b/src.net/samples/MpxjCreate/Properties/AssemblyInfo.cs index 6ec05a6323..59613e50dd 100644 --- a/src.net/samples/MpxjCreate/Properties/AssemblyInfo.cs +++ b/src.net/samples/MpxjCreate/Properties/AssemblyInfo.cs @@ -31,6 +31,6 @@ // // You can specify all the values or you can default the Build and Revision Numbers // by using the '*' as shown below: -// [assembly: AssemblyVersion("13.5.0.0")] -[assembly: AssemblyVersion("13.5.0.0")] -[assembly: AssemblyFileVersion("13.5.0.0")] +// [assembly: AssemblyVersion("13.5.1.0")] +[assembly: AssemblyVersion("13.5.1.0")] +[assembly: AssemblyFileVersion("13.5.1.0")] diff --git a/src.net/samples/MpxjPrimaveraConvert/Properties/AssemblyInfo.cs b/src.net/samples/MpxjPrimaveraConvert/Properties/AssemblyInfo.cs index 50acce20cc..f9bb0b08ee 100644 --- a/src.net/samples/MpxjPrimaveraConvert/Properties/AssemblyInfo.cs +++ b/src.net/samples/MpxjPrimaveraConvert/Properties/AssemblyInfo.cs @@ -31,6 +31,6 @@ // // You can specify all the values or you can default the Build and Revision Numbers // by using the '*' as shown below: -// [assembly: AssemblyVersion("13.5.0.0")] -[assembly: AssemblyVersion("13.5.0.0")] -[assembly: AssemblyFileVersion("13.5.0.0")] +// [assembly: AssemblyVersion("13.5.1.0")] +[assembly: AssemblyVersion("13.5.1.0")] +[assembly: AssemblyFileVersion("13.5.1.0")] diff --git a/src.net/samples/MpxjQuery/Properties/AssemblyInfo.cs b/src.net/samples/MpxjQuery/Properties/AssemblyInfo.cs index d908fe31b1..71b63c5b08 100644 --- a/src.net/samples/MpxjQuery/Properties/AssemblyInfo.cs +++ b/src.net/samples/MpxjQuery/Properties/AssemblyInfo.cs @@ -31,6 +31,6 @@ // // You can specify all the values or you can default the Build and Revision Numbers // by using the '*' as shown below: -// [assembly: AssemblyVersion("13.5.0.0")] -[assembly: AssemblyVersion("13.5.0.0")] -[assembly: AssemblyFileVersion("13.5.0.0")] +// [assembly: AssemblyVersion("13.5.1.0")] +[assembly: AssemblyVersion("13.5.1.0")] +[assembly: AssemblyFileVersion("13.5.1.0")] diff --git a/src.net/samples/MpxjTest/Properties/AssemblyInfo.cs b/src.net/samples/MpxjTest/Properties/AssemblyInfo.cs index dbecb9d973..68c4ca023f 100644 --- a/src.net/samples/MpxjTest/Properties/AssemblyInfo.cs +++ b/src.net/samples/MpxjTest/Properties/AssemblyInfo.cs @@ -32,6 +32,6 @@ // // You can specify all the values or you can default the Build and Revision Numbers // by using the '*' as shown below: -// [assembly: AssemblyVersion("13.5.0.0")] -[assembly: AssemblyVersion("13.5.0.0")] -[assembly: AssemblyFileVersion("13.5.0.0")] +// [assembly: AssemblyVersion("13.5.1.0")] +[assembly: AssemblyVersion("13.5.1.0")] +[assembly: AssemblyFileVersion("13.5.1.0")] diff --git a/src.net/utilities/AssemblyInfo.cs b/src.net/utilities/AssemblyInfo.cs index d411dff647..c9d4d319ee 100644 --- a/src.net/utilities/AssemblyInfo.cs +++ b/src.net/utilities/AssemblyInfo.cs @@ -32,6 +32,6 @@ // // You can specify all the values or you can default the Build and Revision Numbers // by using the '*' as shown below: -// [assembly: AssemblyVersion("13.5.0.0")] -[assembly: AssemblyVersion("13.5.0.0")] -[assembly: AssemblyFileVersion("13.5.0.0")] +// [assembly: AssemblyVersion("13.5.1.0")] +[assembly: AssemblyVersion("13.5.1.0")] +[assembly: AssemblyFileVersion("13.5.1.0")] diff --git a/src.net/utilities/MpxjUtilities.nca31.csproj b/src.net/utilities/MpxjUtilities.nca31.csproj index ba23b94fd7..a9dd62729f 100644 --- a/src.net/utilities/MpxjUtilities.nca31.csproj +++ b/src.net/utilities/MpxjUtilities.nca31.csproj @@ -6,7 +6,7 @@ netcoreapp3.1 true ..\mpxj.snk - 13.5.0.0 + 13.5.1.0 Copyright © Packwood Software diff --git a/src.python/mpxj/setup.py b/src.python/mpxj/setup.py index ef225d05ee..a364005b73 100644 --- a/src.python/mpxj/setup.py +++ b/src.python/mpxj/setup.py @@ -5,7 +5,7 @@ setuptools.setup( name="mpxj", - version="13.5.0", + version="13.5.1", author="Jon Iles", author_email="jon@timephased.com", description="Python wrapper for the MPXJ Java library for manipulating project files", diff --git a/src.ruby/mpxj/lib/mpxj/version.rb b/src.ruby/mpxj/lib/mpxj/version.rb index 97c5629ca1..ec2e96b818 100644 --- a/src.ruby/mpxj/lib/mpxj/version.rb +++ b/src.ruby/mpxj/lib/mpxj/version.rb @@ -1,5 +1,5 @@ # MPXJ gem module module MPXJ # MPXJ gem version number - VERSION = "13.5.0" + VERSION = "13.5.1" end diff --git a/src/changes/changes.xml b/src/changes/changes.xml index cdb774b7a8..5912f637cf 100644 --- a/src/changes/changes.xml +++ b/src/changes/changes.xml @@ -5,7 +5,10 @@ Jon Iles - + + + + Fix CVE-2024-49771: Potential Path Traversal Vulnerability Added support for reading and writing Resource Role Assignments for Primavera schedules. The `Resource.getRoleAssignments()` method retrieves a map representing the roles a resource is assigned to, along with the skill level for each assignment. The `Resource.addRoleAssignment()` and `Resource.removeRoleAssignment()` methods allow role assignments to be added and removed. diff --git a/src/main/java/net/sf/mpxj/MPXJ.java b/src/main/java/net/sf/mpxj/MPXJ.java index 8f3c9d629a..c4e81f2093 100644 --- a/src/main/java/net/sf/mpxj/MPXJ.java +++ b/src/main/java/net/sf/mpxj/MPXJ.java @@ -28,5 +28,5 @@ */ public final class MPXJ { - public static final String VERSION = "13.5.0"; + public static final String VERSION = "13.5.1"; }