You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@polaris.apache.org by jb...@apache.org on 2026/05/07 12:30:17 UTC

(polaris) branch main updated: Group the CVEs by Polaris release (#4374)

This is an automated email from the ASF dual-hosted git repository.

jbonofre pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/polaris.git


The following commit(s) were added to refs/heads/main by this push:
     new 85e36cbb4b Group the CVEs by Polaris release (#4374)
85e36cbb4b is described below

commit 85e36cbb4b0bede2e047c3f1dc23124e85600c8f
Author: JB Onofré <jb...@apache.org>
AuthorDate: Thu May 7 14:30:13 2026 +0200

    Group the CVEs by Polaris release (#4374)
---
 site/content/community/security-report.md | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/site/content/community/security-report.md b/site/content/community/security-report.md
index ce7a685161..aa7c73ec50 100644
--- a/site/content/community/security-report.md
+++ b/site/content/community/security-report.md
@@ -40,8 +40,9 @@ The general process for handling security vulnerabilities as follows:
 
 # Known Security Vulnerabilities (CVEs)
 
-* [CVE-2026-42809](../security-advisories/cve-2026-42809/)
-* [CVE-2026-42810](../security-advisories/cve-2026-42810/)
-* [CVE-2026-42811](../security-advisories/cve-2026-42811/)
-* [CVE-2026-42812](../security-advisories/cve-2026-42812/)
+* Fixed in Apache Polaris 1.4.1
+  * [CVE-2026-42809](../security-advisories/cve-2026-42809/)
+  * [CVE-2026-42810](../security-advisories/cve-2026-42810/)
+  * [CVE-2026-42811](../security-advisories/cve-2026-42811/)
+  * [CVE-2026-42812](../security-advisories/cve-2026-42812/)