H2Database for WildFly 26.x

[Boris Unckel]

Hello,

the H2Database version 1.4.197 shipped with WildFly 26.x cannot be upgraded due to SQL and/or JDBC compatibility issues. Unfortunately there are some CVEs only fixed in later version of H2Database. 

I have forked and backported some of the fixes:

https://github.com/boris-unckel/h2database/tree/1.4.197.x

You have to build it youself, use on your own risk. The version 1.4.197.1 does pass all WF26 integration tests, tested on Linux with JDK11.

Hope it helps someone to improve security.

Happy Christmas!

Boris

[1] https://docs.wildfly.org/26/Developer_Guide.html#h2-web-console

[2] Git-Diff https://github.com/boris-unckel/h2database/compare/version-1.4.197...version-1.4.197.1

[Brian Stansberry]

Thanks, Boris!