This is an automated email from the ASF dual-hosted git repository.
lhotari pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/pulsar.git
The following commit(s) were added to refs/heads/master by this push:
new dff4f1e95ae [fix][sec] Upgrade vertx to address CVE-2026-1002 (#25152)
dff4f1e95ae is described below
commit dff4f1e95aee2addffa6db38e19984755f5aca38
Author: Lari Hotari <[email protected]>
AuthorDate: Fri Jan 16 12:43:50 2026 +0200
[fix][sec] Upgrade vertx to address CVE-2026-1002 (#25152)
---
distribution/server/src/assemble/LICENSE.bin.txt | 10 +++++-----
pom.xml | 2 +-
2 files changed, 6 insertions(+), 6 deletions(-)
diff --git a/distribution/server/src/assemble/LICENSE.bin.txt
b/distribution/server/src/assemble/LICENSE.bin.txt
index 0aaf02e3f46..201c5dc6808 100644
--- a/distribution/server/src/assemble/LICENSE.bin.txt
+++ b/distribution/server/src/assemble/LICENSE.bin.txt
@@ -508,11 +508,11 @@ The Apache Software License, Version 2.0
* JCTools - Java Concurrency Tools for the JVM
- org.jctools-jctools-core-4.0.5.jar
* Vertx
- - io.vertx-vertx-auth-common-4.5.22.jar
- - io.vertx-vertx-bridge-common-4.5.22.jar
- - io.vertx-vertx-core-4.5.22.jar
- - io.vertx-vertx-web-4.5.22.jar
- - io.vertx-vertx-web-common-4.5.22.jar
+ - io.vertx-vertx-auth-common-4.5.24.jar
+ - io.vertx-vertx-bridge-common-4.5.24.jar
+ - io.vertx-vertx-core-4.5.24.jar
+ - io.vertx-vertx-web-4.5.24.jar
+ - io.vertx-vertx-web-common-4.5.24.jar
* Apache ZooKeeper
- org.apache.zookeeper-zookeeper-jute-3.9.4.jar
* Snappy Java
diff --git a/pom.xml b/pom.xml
index 4d91aa1912a..335fd2485dc 100644
--- a/pom.xml
+++ b/pom.xml
@@ -198,7 +198,7 @@ flexible messaging model and an intuitive client
API.</description>
<jersey.version>2.42</jersey.version>
<athenz.version>1.10.62</athenz.version>
<prometheus.version>0.16.0</prometheus.version>
- <vertx.version>4.5.22</vertx.version>
+ <vertx.version>4.5.24</vertx.version>
<rocksdb.version>7.9.2</rocksdb.version>
<slf4j.version>2.0.17</slf4j.version>
<commons.collections4.version>4.5.0</commons.collections4.version>
