You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by eo...@apache.org on 2021/04/29 08:24:57 UTC
[pulsar] branch branch-2.7 updated: [Security] Upgrade commons-io
to address CVE-2021-29425 (#10287)
This is an automated email from the ASF dual-hosted git repository.
eolivelli pushed a commit to branch branch-2.7
in repository https://gitbox.apache.org/repos/asf/pulsar.git
The following commit(s) were added to refs/heads/branch-2.7 by this push:
new c941860 [Security] Upgrade commons-io to address CVE-2021-29425 (#10287)
c941860 is described below
commit c941860dc229f318cd9c9b67dbaf28d30cc3a59e
Author: Lari Hotari <lh...@users.noreply.github.com>
AuthorDate: Tue Apr 20 22:02:51 2021 +0300
[Security] Upgrade commons-io to address CVE-2021-29425 (#10287)
* [Security] Upgrade commons-io to address CVE-2021-29425
* Upgrade license
(cherry picked from commit 9d7cad44030f6a02578bb8d4c73e590ddc8a8c1d)
---
distribution/server/src/assemble/LICENSE.bin.txt | 2 +-
pom.xml | 2 +-
pulsar-sql/presto-distribution/LICENSE | 2 +-
3 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/distribution/server/src/assemble/LICENSE.bin.txt b/distribution/server/src/assemble/LICENSE.bin.txt
index fff2916..105f3c5 100644
--- a/distribution/server/src/assemble/LICENSE.bin.txt
+++ b/distribution/server/src/assemble/LICENSE.bin.txt
@@ -350,7 +350,7 @@ The Apache Software License, Version 2.0
- commons-codec-commons-codec-1.10.jar
- commons-collections-commons-collections-3.2.2.jar
- commons-configuration-commons-configuration-1.10.jar
- - commons-io-commons-io-2.5.jar
+ - commons-io-commons-io-2.8.0.jar
- commons-lang-commons-lang-2.6.jar
- commons-logging-commons-logging-1.1.1.jar
- org.apache.commons-commons-collections4-4.1.jar
diff --git a/pom.xml b/pom.xml
index 089bbe5..3c84550 100644
--- a/pom.xml
+++ b/pom.xml
@@ -162,7 +162,7 @@ flexible messaging model and an intuitive client API.</description>
<jcommander.version>1.78</jcommander.version>
<commons-lang3.version>3.6</commons-lang3.version>
<commons-configuration.version>1.10</commons-configuration.version>
- <commons-io.version>2.5</commons-io.version>
+ <commons-io.version>2.8.0</commons-io.version>
<commons-codec.version>1.10</commons-codec.version>
<javax.ws.rs-api.version>2.1</javax.ws.rs-api.version>
<log4j.version>1.2.17</log4j.version>
diff --git a/pulsar-sql/presto-distribution/LICENSE b/pulsar-sql/presto-distribution/LICENSE
index 99217c75..d627cd9 100644
--- a/pulsar-sql/presto-distribution/LICENSE
+++ b/pulsar-sql/presto-distribution/LICENSE
@@ -428,7 +428,7 @@ The Apache Software License, Version 2.0
- commons-codec-1.10.jar
- commons-collections4-4.1.jar
- commons-configuration-1.10.jar
- - commons-io-2.5.jar
+ - commons-io-2.8.0.jar
- commons-lang-2.6.jar
- commons-logging-1.2.jar
* GSON