You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-commits@hadoop.apache.org by sl...@apache.org on 2025/09/23 05:30:06 UTC

(hadoop) branch branch-3.4 updated: HADOOP-19690. bump commons-lang3 to 3.18.0 due to CVE-2025-48924 (#7970) (#7985) Contributed by PJ Fanning.

This is an automated email from the ASF dual-hosted git repository.

slfan1989 pushed a commit to branch branch-3.4
in repository https://gitbox.apache.org/repos/asf/hadoop.git


The following commit(s) were added to refs/heads/branch-3.4 by this push:
     new ca3d8acaae6 HADOOP-19690. bump commons-lang3 to 3.18.0 due to CVE-2025-48924 (#7970) (#7985) Contributed by PJ Fanning.
ca3d8acaae6 is described below

commit ca3d8acaae69aa3189763f072c9f5f0a6ee41aaf
Author: PJ Fanning <pj...@users.noreply.github.com>
AuthorDate: Tue Sep 23 06:30:00 2025 +0100

    HADOOP-19690. bump commons-lang3 to 3.18.0 due to CVE-2025-48924 (#7970) (#7985) Contributed by PJ Fanning.
    
    * HADOOP-19690. bump commons-lang3 to 3.18.0 due to CVE-2025-48924
    
    Signed-off-by: Shilun Fan <sl...@apache.org>
---
 LICENSE-binary         | 4 ++--
 hadoop-project/pom.xml | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/LICENSE-binary b/LICENSE-binary
index 3ad4b30045d..c8cd9a21ced 100644
--- a/LICENSE-binary
+++ b/LICENSE-binary
@@ -301,9 +301,9 @@ org.apache.commons:commons-compress:1.26.1
 org.apache.commons:commons-configuration2:2.10.1
 org.apache.commons:commons-csv:1.9.0
 org.apache.commons:commons-digester:1.8.1
-org.apache.commons:commons-lang3:3.17.0
+org.apache.commons:commons-lang3:3.18.0
 org.apache.commons:commons-math3:3.6.1
-org.apache.commons:commons-text:1.10.0
+org.apache.commons:commons-text:1.14.0
 org.apache.commons:commons-validator:1.6
 org.apache.curator:curator-client:5.2.0
 org.apache.curator:curator-framework:5.2.0
diff --git a/hadoop-project/pom.xml b/hadoop-project/pom.xml
index aa534223290..3963fd136ff 100644
--- a/hadoop-project/pom.xml
+++ b/hadoop-project/pom.xml
@@ -124,11 +124,11 @@
     <commons-compress.version>1.26.1</commons-compress.version>
     <commons-csv.version>1.9.0</commons-csv.version>
     <commons-io.version>2.16.1</commons-io.version>
-    <commons-lang3.version>3.17.0</commons-lang3.version>
+    <commons-lang3.version>3.18.0</commons-lang3.version>
     <commons-logging.version>1.3.0</commons-logging.version>
     <commons-math3.version>3.6.1</commons-math3.version>
     <commons-net.version>3.9.0</commons-net.version>
-    <commons-text.version>1.10.0</commons-text.version>
+    <commons-text.version>1.14.0</commons-text.version>
 
     <kerby.version>2.0.3</kerby.version>
     <ehcache.version>3.8.2</ehcache.version>


---------------------------------------------------------------------
To unsubscribe, e-mail: common-commits-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-commits-help@hadoop.apache.org