Related question...are there plans to fix the following CVEs before the next release:
[CVE-2018-10054] Improper Input Validation (8.8); https://ossindex.sonatype.org/vuln/b3e3cc9b-766a-4507-9099-51754784a643 [CVE-2018-14335] An issue was discovered in H2 1.4.197. Insecure handling of permissions in the b... (6.5); https://ossindex.sonatype.org/vuln/d3bb2bf8-2080-4598-997a-51bbed9647fb H2 1.4.197 recently started breaking our build (because of ossindex-maven-plugin) on Apache Tika [1]. Many thanks for an amazing db! Cheers, Tim [1] https://issues.apache.org/jira/browse/TIKA-2808 On Friday, January 4, 2019 at 2:46:33 PM UTC-5, [email protected] wrote: > > currently we are on H2 database 1.4.197 version. > i will like to know when the next LTS release is scheduled? > -- You received this message because you are subscribed to the Google Groups "H2 Database" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/h2-database. For more options, visit https://groups.google.com/d/optout.
