You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by lh...@apache.org on 2026/01/16 11:49:52 UTC
(pulsar) 06/07: [fix][sec] Upgrade vertx to address CVE-2026-1002 (#25152)
This is an automated email from the ASF dual-hosted git repository.
lhotari pushed a commit to branch branch-4.0
in repository https://gitbox.apache.org/repos/asf/pulsar.git
commit 98c21c4397378abb9612caec543ca94e2843e5da
Author: Lari Hotari <lh...@users.noreply.github.com>
AuthorDate: Fri Jan 16 12:43:50 2026 +0200
[fix][sec] Upgrade vertx to address CVE-2026-1002 (#25152)
(cherry picked from commit dff4f1e95aee2addffa6db38e19984755f5aca38)
---
distribution/server/src/assemble/LICENSE.bin.txt | 10 +++++-----
pom.xml | 2 +-
2 files changed, 6 insertions(+), 6 deletions(-)
diff --git a/distribution/server/src/assemble/LICENSE.bin.txt b/distribution/server/src/assemble/LICENSE.bin.txt
index 2d926b23b66..e388fd91f45 100644
--- a/distribution/server/src/assemble/LICENSE.bin.txt
+++ b/distribution/server/src/assemble/LICENSE.bin.txt
@@ -495,11 +495,11 @@ The Apache Software License, Version 2.0
* JCTools - Java Concurrency Tools for the JVM
- org.jctools-jctools-core-2.1.2.jar
* Vertx
- - io.vertx-vertx-auth-common-4.5.22.jar
- - io.vertx-vertx-bridge-common-4.5.22.jar
- - io.vertx-vertx-core-4.5.22.jar
- - io.vertx-vertx-web-4.5.22.jar
- - io.vertx-vertx-web-common-4.5.22.jar
+ - io.vertx-vertx-auth-common-4.5.24.jar
+ - io.vertx-vertx-bridge-common-4.5.24.jar
+ - io.vertx-vertx-core-4.5.24.jar
+ - io.vertx-vertx-web-4.5.24.jar
+ - io.vertx-vertx-web-common-4.5.24.jar
* Apache ZooKeeper
- org.apache.zookeeper-zookeeper-3.9.4.jar
- org.apache.zookeeper-zookeeper-jute-3.9.4.jar
diff --git a/pom.xml b/pom.xml
index 8ef70d72cff..6419f7be742 100644
--- a/pom.xml
+++ b/pom.xml
@@ -191,7 +191,7 @@ flexible messaging model and an intuitive client API.</description>
<jersey.version>2.42</jersey.version>
<athenz.version>1.10.62</athenz.version>
<prometheus.version>0.16.0</prometheus.version>
- <vertx.version>4.5.22</vertx.version>
+ <vertx.version>4.5.24</vertx.version>
<rocksdb.version>7.9.2</rocksdb.version>
<slf4j.version>2.0.17</slf4j.version>
<commons.collections4.version>4.5.0</commons.collections4.version>