diff --git a/README.md b/README.md index ddd2aa84a..62d7d95ae 100644 --- a/README.md +++ b/README.md @@ -1,7 +1,7 @@ JFreeChart ========== -Version 1.5.5, not yet released. +Version 1.5.5, 23 June 2024. [![Maven Central](https://maven-badges.herokuapp.com/maven-central/org.jfree/jfreechart/badge.svg)](https://maven-badges.herokuapp.com/maven-central/org.jfree/jfreechart) @@ -33,7 +33,7 @@ To use JFreeChart in your projects, add the following dependency to your build t org.jfree jfreechart - 1.5.4 + 1.5.5 @@ -56,11 +56,23 @@ at GitHub: History ------- -##### Version 1.5.5 (not yet released) +##### Version 1.5.5 (23 June 2024) - added `XYBezierRenderer` by Javier Robes ([#286](https://github.com/jfree/jfreechart/pull/286)) - fix cross-hair painting ([#340](https://github.com/jfree/jfreechart/issues/340)) - parameter range check for `CompassPlot` ([#397](https://github.com/jfree/jfreechart/pull/397)) +Note: some security vulnerabilities have been reported for v1.5.4. : + +- [CVE-2023-52070](https://nvd.nist.gov/vuln/detail/CVE-2023-52070) : an `ArrayIndexOutOfBoundsException` in `CompassPlot`\ + No fix is considered necessary, however ([#397](https://github.com/jfree/jfreechart/pull/397)) has been applied. + +- [CVE-2024-22949](https://nvd.nist.gov/vuln/detail/CVE-2024-22949) : a possible `NullPointerException` in `CategoryLineAnnotation`\ + No fix is considered necessary. + +- [CVE-2024-23076](https://nvd.nist.gov/vuln/detail/CVE-2024-23076) : a possible `NullPointerException` in `BubbleXYItemLabelGenerator`\ + No fix is considered necessary. + + ##### Version 1.5.4 (8 January 2023) - add new methods to access maps for datasets, renderers and axes in plots ([#201](https://github.com/jfree/jfreechart/issues/201)); - add option to truncate item labels and compute contrast colors (PR [#225](https://github.com/jfree/jfreechart/pull/225)) @@ -72,7 +84,6 @@ History - add argument checks for annotations ([#223](https://github.com/jfree/jfreechart/issues/223)); - removed `JFreeChartResources.java` file ([#239](https://github.com/jfree/jfreechart/issues/239)) - ##### Version 1.5.3 (21 February 2021) - add new `FlowPlot` class for drawing Sankey charts; - throw exception in `DefaultPieDataset` for invalid index ([#212](https://github.com/jfree/jfreechart/issues/212)); diff --git a/pom.xml b/pom.xml index 0b7f54481..30c718ced 100644 --- a/pom.xml +++ b/pom.xml @@ -10,7 +10,7 @@ jfreechart org.jfree - 1.5.5-snapshot + 1.5.5 jar @@ -204,7 +204,7 @@ org.apache.maven.plugins maven-gpg-plugin - 1.5 + 3.2.4 sign-artifacts @@ -219,7 +219,7 @@ org.sonatype.plugins nexus-staging-maven-plugin - 1.6.13 + 1.7.0 true ossrh @@ -231,7 +231,7 @@ org.apache.maven.plugins maven-javadoc-plugin - 3.4.1 + 3.7.0 true 8 @@ -250,7 +250,7 @@ org.apache.maven.plugins maven-source-plugin - 3.2.1 + 3.3.1 attach-sources diff --git a/src/main/java/org/jfree/chart/annotations/CategoryLineAnnotation.java b/src/main/java/org/jfree/chart/annotations/CategoryLineAnnotation.java index 3063821fe..347d26138 100644 --- a/src/main/java/org/jfree/chart/annotations/CategoryLineAnnotation.java +++ b/src/main/java/org/jfree/chart/annotations/CategoryLineAnnotation.java @@ -274,11 +274,11 @@ public void setStroke(Stroke stroke) { /** * Draws the annotation. * - * @param g2 the graphics device. - * @param plot the plot. - * @param dataArea the data area. - * @param domainAxis the domain axis. - * @param rangeAxis the range axis. + * @param g2 the graphics device ({@code null} not permitted). + * @param plot the plot ({@code null} not permitted). + * @param dataArea the data area ({@code null} not permitted). + * @param domainAxis the domain axis ({@code null} not permitted). + * @param rangeAxis the range axis ({@code null} not permitted). */ @Override public void draw(Graphics2D g2, CategoryPlot plot, Rectangle2D dataArea,