chore: Upgrade to JasperStarter 3.6.2

PHPJasper · Xint0-elab · Feb 21, 2022 · Feb 21, 2022 · Jun 16, 2022 · Feb 21, 2022
commit e466e5bdc09987a21a55bbb38656f31392400a04
diff --git a/bin/jasperstarter/.gitattributes b/bin/jasperstarter/.gitattributes
@@ -0,0 +1,5 @@
+CHANGES text eol=crlf
+LICENSE text eol=crlf
+NOTICE text eol=crlf
+README.md text eol=crlf
+jdbc/README text eol=crlf
diff --git a/bin/jasperstarter/CHANGES b/bin/jasperstarter/CHANGES
@@ -2,6 +2,41 @@
 JasperStarter - Running JasperReports from command line
 ========================================================
 
+Release notes - JasperStarter - Version 3.6.2
+---------------------------------------------
+
+** Bug
+    * JAS-161 CVE-2021-44832 in log4j-2.17.0
+
+
+Release notes - JasperStarter - Version 3.6.1
+---------------------------------------------
+
+** Bug
+    * JAS-160 log4j 2.16.0 is vulnerable to CVE-2021-45105
+
+
+Release notes - JasperStarter - Version 3.6.0
+---------------------------------------------
+
+** Bug
+    * CVE-2019-17571 - Included in Log4j 1.2 is a SocketServer class that is
+      vulnerable to deserialization of untrusted data which can be exploited to
+      remotely execute arbitrary code when combined with a deserialization
+      gadget when listening to untrusted network traffic for log data. This
+      affects Log4j versions up to 1.2 up to 1.2.17.
+
+    * [JAS-158] Jasperstarter contains an old log4j-1.2.17 which is affected by CVE-2019-17571
+    * [JAS-146] mvn: Could not resolve dependencies \(...\) from/to jaspersoft.artifactoryonline.com
+    * [JAS-142] Failed to generate qrcode - zxing library missing
+
+** Improvement
+    * [JAS-156] Is JasperStarter vulnerable to CVE-2021-44228
+
+** Task
+    * [JAS-157] Include JasperReports 6.18.1
+
+
 Release notes - JasperStarter - Version 3.5.0
 ---------------------------------------------
 
@@ -359,7 +394,7 @@ JasperStarter is now able to prompt for report parameters.
           jrxml    - compiles implicit
           jrprint  - print, view or export previously filled reports.
         New output type: jrprint. This makes --keep obsolete.
-        New parameter -w writes compiled file to imput dir if jrxml is
+        New parameter -w writes compiled file to input dir if jrxml is
         processed.
         Parameter -t defaults to "none" and can therefore be omited if no
         database is needed.

diff --git a/bin/jasperstarter/LICENSE b/bin/jasperstarter/LICENSE
diff --git a/bin/jasperstarter/NOTICE b/bin/jasperstarter/NOTICE
diff --git a/bin/jasperstarter/README.md b/bin/jasperstarter/README.md
@@ -7,6 +7,12 @@ JasperStarter is an opensource command line launcher and batch compiler for
 
 The official homepage is [jasperstater.cenote.de][].
 
+**JasperStarter is not vulnerable to [CVE-2021-44228](https://nvd.nist.gov/vuln/detail/CVE-2021-44228).**
+
+**But all releases including 3.5.0 contain log4j-1.2.17 which is affected by
+[CVE-2019-17571](https://nvd.nist.gov/vuln/detail/CVE-2019-17571).** I cannot say if it is possible to
+exploit this with JasperStarter but in any case you should update to a newer version of JasperStarter.
+
 It has the following features:
 
   * Run any JasperReport that needs a jdbc, csv, xml, json, jsonql or empty datasource
@@ -33,7 +39,7 @@ It has the following features:
 
 Requirements:
 
-  * Java 1.8 or higher
+  * Java 1.8
   * A JDBC 2.1 driver for your database
 
 
@@ -228,4 +234,4 @@ limitations under the License.
 [Usage]:http://jasperstarter.sourceforge.net/usage.html
 [Issues]:https://cenote-issues.atlassian.net/browse/JAS
 [Changes]:changes.html
-[jpy]:https://github.com/bcdev/jpy
+[jpy]:https://github.com/bcdev/jpy
diff --git a/bin/jasperstarter/bin/jasperstarter b/bin/jasperstarter/bin/jasperstarter
@@ -18,7 +18,7 @@
 if(test -L "$0") then
   auxlink=`ls -l "$0" | sed 's/^[^>]*-> //g'`
   HOME_FOLDER=`dirname "$auxlink"`/..
-else
+else 
   HOME_FOLDER=`dirname "$0"`/..
 fi
 

diff --git a/bin/jasperstarter/bin/jasperstarter.exe b/bin/jasperstarter/bin/jasperstarter.exe
diff --git a/bin/jasperstarter/lib/ant-1.7.1.jar b/bin/jasperstarter/lib/ant-1.7.1.jar
diff --git a/bin/jasperstarter/lib/ant-launcher-1.7.1.jar b/bin/jasperstarter/lib/ant-launcher-1.7.1.jar
diff --git a/bin/jasperstarter/lib/antlr-2.7.7.jar b/bin/jasperstarter/lib/antlr-2.7.7.jar
diff --git a/bin/jasperstarter/lib/antlr-3.0b5.jar b/bin/jasperstarter/lib/antlr-3.0b5.jar
diff --git a/bin/jasperstarter/lib/argparse4j-0.5.0.jar b/bin/jasperstarter/lib/argparse4j-0.5.0.jar
diff --git a/bin/jasperstarter/lib/avalon-framework-impl-4.2.0.jar b/bin/jasperstarter/lib/avalon-framework-impl-4.2.0.jar
diff --git a/bin/jasperstarter/lib/barbecue-1.5-beta1.jar b/bin/jasperstarter/lib/barbecue-1.5-beta1.jar
diff --git a/bin/jasperstarter/lib/barcode4j-2.1.jar b/bin/jasperstarter/lib/barcode4j-2.1.jar
diff --git a/bin/jasperstarter/lib/batik-anim-1.9.1.jar b/bin/jasperstarter/lib/batik-anim-1.9.1.jar
diff --git a/bin/jasperstarter/lib/batik-awt-util-1.9.1.jar b/bin/jasperstarter/lib/batik-awt-util-1.9.1.jar
diff --git a/bin/jasperstarter/lib/batik-bridge-1.9.1.jar b/bin/jasperstarter/lib/batik-bridge-1.9.1.jar
diff --git a/bin/jasperstarter/lib/batik-constants-1.9.1.jar b/bin/jasperstarter/lib/batik-constants-1.9.1.jar
diff --git a/bin/jasperstarter/lib/batik-css-1.9.1.jar b/bin/jasperstarter/lib/batik-css-1.9.1.jar
diff --git a/bin/jasperstarter/lib/batik-dom-1.9.1.jar b/bin/jasperstarter/lib/batik-dom-1.9.1.jar
diff --git a/bin/jasperstarter/lib/batik-ext-1.9.1.jar b/bin/jasperstarter/lib/batik-ext-1.9.1.jar
diff --git a/bin/jasperstarter/lib/batik-gvt-1.9.1.jar b/bin/jasperstarter/lib/batik-gvt-1.9.1.jar
diff --git a/bin/jasperstarter/lib/batik-i18n-1.9.1.jar b/bin/jasperstarter/lib/batik-i18n-1.9.1.jar
diff --git a/bin/jasperstarter/lib/batik-parser-1.9.1.jar b/bin/jasperstarter/lib/batik-parser-1.9.1.jar
diff --git a/bin/jasperstarter/lib/batik-script-1.9.1.jar b/bin/jasperstarter/lib/batik-script-1.9.1.jar
diff --git a/bin/jasperstarter/lib/batik-svg-dom-1.9.1.jar b/bin/jasperstarter/lib/batik-svg-dom-1.9.1.jar
diff --git a/bin/jasperstarter/lib/batik-svggen-1.9.1.jar b/bin/jasperstarter/lib/batik-svggen-1.9.1.jar
diff --git a/bin/jasperstarter/lib/batik-util-1.9.1.jar b/bin/jasperstarter/lib/batik-util-1.9.1.jar
diff --git a/bin/jasperstarter/lib/batik-xml-1.9.1.jar b/bin/jasperstarter/lib/batik-xml-1.9.1.jar
diff --git a/bin/jasperstarter/lib/bcprov-jdk15on-1.52.jar b/bin/jasperstarter/lib/bcprov-jdk15on-1.52.jar
diff --git a/bin/jasperstarter/lib/bcprov-jdk15on-1.68.jar b/bin/jasperstarter/lib/bcprov-jdk15on-1.68.jar
diff --git a/bin/jasperstarter/lib/castor-core-1.3.3.jar b/bin/jasperstarter/lib/castor-core-1.3.3.jar
diff --git a/bin/jasperstarter/lib/castor-core-1.4.1.jar b/bin/jasperstarter/lib/castor-core-1.4.1.jar
diff --git a/bin/jasperstarter/lib/castor-xml-1.3.3.jar b/bin/jasperstarter/lib/castor-xml-1.3.3.jar
diff --git a/bin/jasperstarter/lib/castor-xml-1.4.1.jar b/bin/jasperstarter/lib/castor-xml-1.4.1.jar
diff --git a/...erstarter/lib/commons-beanutils-1.9.3.jar → ...erstarter/lib/commons-beanutils-1.9.4.jar b/...erstarter/lib/commons-beanutils-1.9.3.jar → ...erstarter/lib/commons-beanutils-1.9.4.jar
diff --git a/bin/jasperstarter/lib/commons-cli-1.0.jar b/bin/jasperstarter/lib/commons-cli-1.0.jar
diff --git a/bin/jasperstarter/lib/commons-codec-1.10.jar b/bin/jasperstarter/lib/commons-codec-1.10.jar
diff --git a/bin/jasperstarter/lib/commons-collections-3.2.2.jar b/bin/jasperstarter/lib/commons-collections-3.2.2.jar
diff --git a/bin/jasperstarter/lib/commons-collections4-4.1.jar b/bin/jasperstarter/lib/commons-collections4-4.1.jar
diff --git a/bin/jasperstarter/lib/commons-collections4-4.2.jar b/bin/jasperstarter/lib/commons-collections4-4.2.jar
diff --git a/bin/jasperstarter/lib/commons-digester-2.1.jar b/bin/jasperstarter/lib/commons-digester-2.1.jar
diff --git a/bin/jasperstarter/lib/commons-io-2.5.jar b/bin/jasperstarter/lib/commons-io-2.5.jar
diff --git a/bin/jasperstarter/lib/commons-lang-2.6.jar b/bin/jasperstarter/lib/commons-lang-2.6.jar
diff --git a/bin/jasperstarter/lib/commons-lang3-3.4.jar b/bin/jasperstarter/lib/commons-lang3-3.4.jar
diff --git a/bin/jasperstarter/lib/commons-logging-1.1.1.jar b/bin/jasperstarter/lib/commons-logging-1.1.1.jar
diff --git a/bin/jasperstarter/lib/core-2.3.0.jar b/bin/jasperstarter/lib/core-2.3.0.jar
diff --git a/bin/jasperstarter/lib/ecj-3.21.0.jar b/bin/jasperstarter/lib/ecj-3.21.0.jar
diff --git a/bin/jasperstarter/lib/ecj-4.4.2.jar b/bin/jasperstarter/lib/ecj-4.4.2.jar
diff --git a/bin/jasperstarter/lib/groovy-all-2.4.12.jar b/bin/jasperstarter/lib/groovy-all-2.4.12.jar
diff --git a/bin/jasperstarter/lib/icu4j-57.1.jar b/bin/jasperstarter/lib/icu4j-57.1.jar
diff --git a/bin/jasperstarter/lib/itext-2.1.7.js6.jar → bin/jasperstarter/lib/itext-2.1.7.js9.jar b/bin/jasperstarter/lib/itext-2.1.7.js6.jar → bin/jasperstarter/lib/itext-2.1.7.js9.jar
diff --git a/bin/jasperstarter/lib/jackson-annotations-2.12.2.jar b/bin/jasperstarter/lib/jackson-annotations-2.12.2.jar
diff --git a/bin/jasperstarter/lib/jackson-annotations-2.9.5.jar b/bin/jasperstarter/lib/jackson-annotations-2.9.5.jar
diff --git a/bin/jasperstarter/lib/jackson-core-2.12.2.jar b/bin/jasperstarter/lib/jackson-core-2.12.2.jar
diff --git a/bin/jasperstarter/lib/jackson-core-2.9.5.jar b/bin/jasperstarter/lib/jackson-core-2.9.5.jar
diff --git a/bin/jasperstarter/lib/jackson-databind-2.12.2.jar b/bin/jasperstarter/lib/jackson-databind-2.12.2.jar
diff --git a/bin/jasperstarter/lib/jackson-databind-2.9.5.jar b/bin/jasperstarter/lib/jackson-databind-2.9.5.jar
diff --git a/bin/jasperstarter/lib/jasperreports-6.18.1.jar b/bin/jasperstarter/lib/jasperreports-6.18.1.jar
diff --git a/bin/jasperstarter/lib/jasperreports-6.7.0.jar b/bin/jasperstarter/lib/jasperreports-6.7.0.jar
diff --git a/bin/jasperstarter/lib/jasperreports-chart-customizers-6.18.1.jar b/bin/jasperstarter/lib/jasperreports-chart-customizers-6.18.1.jar
diff --git a/bin/jasperstarter/lib/jasperreports-chart-customizers-6.7.0.jar b/bin/jasperstarter/lib/jasperreports-chart-customizers-6.7.0.jar
diff --git a/bin/jasperstarter/lib/jasperreports-chart-themes-6.18.1.jar b/bin/jasperstarter/lib/jasperreports-chart-themes-6.18.1.jar
diff --git a/bin/jasperstarter/lib/jasperreports-chart-themes-6.7.0.jar b/bin/jasperstarter/lib/jasperreports-chart-themes-6.7.0.jar
diff --git a/...starter/lib/jasperreports-fonts-6.0.0.jar → ...tarter/lib/jasperreports-fonts-6.18.1.jar b/...starter/lib/jasperreports-fonts-6.0.0.jar → ...tarter/lib/jasperreports-fonts-6.18.1.jar
diff --git a/bin/jasperstarter/lib/jasperreports-functions-6.18.1.jar b/bin/jasperstarter/lib/jasperreports-functions-6.18.1.jar
diff --git a/bin/jasperstarter/lib/jasperreports-functions-6.7.0.jar b/bin/jasperstarter/lib/jasperreports-functions-6.7.0.jar
diff --git a/bin/jasperstarter/lib/jasperstarter.jar b/bin/jasperstarter/lib/jasperstarter.jar
diff --git a/bin/jasperstarter/lib/javax.inject-1.jar b/bin/jasperstarter/lib/javax.inject-1.jar
diff --git a/bin/jasperstarter/lib/jcalendar-1.4.jar b/bin/jasperstarter/lib/jcalendar-1.4.jar
diff --git a/bin/jasperstarter/lib/jcommon-1.0.23.jar b/bin/jasperstarter/lib/jcommon-1.0.23.jar
diff --git a/bin/jasperstarter/lib/jfreechart-1.0.19.jar b/bin/jasperstarter/lib/jfreechart-1.0.19.jar
diff --git a/bin/jasperstarter/lib/joda-time-2.9.9.jar b/bin/jasperstarter/lib/joda-time-2.9.9.jar
diff --git a/bin/jasperstarter/lib/jython-2.7.0.jar b/bin/jasperstarter/lib/jython-2.7.0.jar
diff --git a/bin/jasperstarter/lib/log4j-1.2.17.jar b/bin/jasperstarter/lib/log4j-1.2.17.jar
diff --git a/bin/jasperstarter/lib/log4j-api-2.17.1.jar b/bin/jasperstarter/lib/log4j-api-2.17.1.jar
diff --git a/bin/jasperstarter/lib/log4j-core-2.17.1.jar b/bin/jasperstarter/lib/log4j-core-2.17.1.jar
diff --git a/bin/jasperstarter/lib/poi-3.17.jar b/bin/jasperstarter/lib/poi-3.17.jar
diff --git a/bin/jasperstarter/lib/rhino-1.7.7.2.jar b/bin/jasperstarter/lib/rhino-1.7.7.2.jar
diff --git a/bin/jasperstarter/lib/serializer-2.7.2.jar b/bin/jasperstarter/lib/serializer-2.7.2.jar
diff --git a/bin/jasperstarter/lib/servlet-api-2.5.jar b/bin/jasperstarter/lib/servlet-api-2.5.jar
diff --git a/bin/jasperstarter/lib/spring-beans-4.3.21.RELEASE.jar b/bin/jasperstarter/lib/spring-beans-4.3.21.RELEASE.jar
diff --git a/bin/jasperstarter/lib/spring-core-4.3.21.RELEASE.jar b/bin/jasperstarter/lib/spring-core-4.3.21.RELEASE.jar
diff --git a/bin/jasperstarter/lib/spring-expression-4.3.21.RELEASE.jar b/bin/jasperstarter/lib/spring-expression-4.3.21.RELEASE.jar
diff --git a/bin/jasperstarter/lib/stax-1.2.0.jar b/bin/jasperstarter/lib/stax-1.2.0.jar
diff --git a/bin/jasperstarter/lib/stax-api-1.0-2.jar b/bin/jasperstarter/lib/stax-api-1.0-2.jar
diff --git a/bin/jasperstarter/lib/stax-api-1.0.1.jar b/bin/jasperstarter/lib/stax-api-1.0.1.jar
diff --git a/bin/jasperstarter/lib/stringtemplate-3.0.jar b/bin/jasperstarter/lib/stringtemplate-3.0.jar
diff --git a/bin/jasperstarter/lib/xalan-2.7.2.jar b/bin/jasperstarter/lib/xalan-2.7.2.jar
diff --git a/bin/jasperstarter/lib/xml-apis-1.3.04.jar b/bin/jasperstarter/lib/xml-apis-1.3.04.jar
diff --git a/bin/jasperstarter/lib/xml-apis-ext-1.3.04.jar b/bin/jasperstarter/lib/xml-apis-ext-1.3.04.jar
diff --git a/bin/jasperstarter/lib/xmlgraphics-commons-2.2.jar b/bin/jasperstarter/lib/xmlgraphics-commons-2.2.jar