Improve changelog

exasol · Sep 25, 2023 · 8f64b3a · 8f64b3a
1 parent 7ebd44f
commit 8f64b3a
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/doc/changes/changes_2.0.4.md b/doc/changes/changes_2.0.4.md
@@ -4,7 +4,9 @@ Code name: Fix CVE-2023-42503
 
 ## Summary
 
-This release fixes CVE-2023-42503 in `org.apache.commons:commons-compress`. Please note that transitive dependency `netty-handler` still contains CVE-2023-4586. See [issue #65](https://github.com/exasol/exasol-test-setup-abstraction-java/issues/65) for details.
+This release fixes CVE-2023-42503 in `org.apache.commons:commons-compress`. 
+
+Known issue: Transitive dependency `io.netty:netty-handler` (via `software.amazon.awssdk:cloudformation`) still contains CVE-2023-4586. See [issue #65](https://github.com/exasol/exasol-test-setup-abstraction-java/issues/65) for details.
 
 ## Security
 

diff --git a/pom.xml b/pom.xml
@@ -32,6 +32,7 @@
             <artifactId>exasol-testcontainers</artifactId>
             <version>6.6.2</version>
         </dependency>
+        <!-- Required for ExaOperationGateway -->
         <dependency>
             <groupId>fr.turri</groupId>
             <artifactId>aXMLRPC</artifactId>