This is an automated email from the ASF dual-hosted git repository.
lhotari pushed a commit to branch branch-4.1
in repository https://gitbox.apache.org/repos/asf/pulsar.git
The following commit(s) were added to refs/heads/branch-4.1 by this push:
new bae26c46e1f [fix][sec] Upgrade vert.x to 4.5.25 to address
CVE-2026-6860 (#25737)
bae26c46e1f is described below
commit bae26c46e1f942da0b4404e98ff5000852908ddc
Author: Lari Hotari <[email protected]>
AuthorDate: Mon May 11 11:36:14 2026 +0300
[fix][sec] Upgrade vert.x to 4.5.25 to address CVE-2026-6860 (#25737)
(cherry picked from commit 90f83d465020bbb2f703fa1dc54b2d271b2ec8ae)
---
distribution/server/src/assemble/LICENSE.bin.txt | 10 +++++-----
pom.xml | 2 +-
2 files changed, 6 insertions(+), 6 deletions(-)
diff --git a/distribution/server/src/assemble/LICENSE.bin.txt
b/distribution/server/src/assemble/LICENSE.bin.txt
index fe2da3a962b..ddc23ead2e6 100644
--- a/distribution/server/src/assemble/LICENSE.bin.txt
+++ b/distribution/server/src/assemble/LICENSE.bin.txt
@@ -495,11 +495,11 @@ The Apache Software License, Version 2.0
* JCTools - Java Concurrency Tools for the JVM
- org.jctools-jctools-core-4.0.5.jar
* Vertx
- - io.vertx-vertx-auth-common-4.5.24.jar
- - io.vertx-vertx-bridge-common-4.5.24.jar
- - io.vertx-vertx-core-4.5.24.jar
- - io.vertx-vertx-web-4.5.24.jar
- - io.vertx-vertx-web-common-4.5.24.jar
+ - io.vertx-vertx-auth-common-4.5.25.jar
+ - io.vertx-vertx-bridge-common-4.5.25.jar
+ - io.vertx-vertx-core-4.5.25.jar
+ - io.vertx-vertx-web-4.5.25.jar
+ - io.vertx-vertx-web-common-4.5.25.jar
* Apache ZooKeeper
- org.apache.zookeeper-zookeeper-3.9.5.jar
- org.apache.zookeeper-zookeeper-jute-3.9.5.jar
diff --git a/pom.xml b/pom.xml
index 63c13be68ca..6943358d0b7 100644
--- a/pom.xml
+++ b/pom.xml
@@ -196,7 +196,7 @@ flexible messaging model and an intuitive client
API.</description>
<jersey.version>2.42</jersey.version>
<athenz.version>1.10.62</athenz.version>
<prometheus.version>0.16.0</prometheus.version>
- <vertx.version>4.5.24</vertx.version>
+ <vertx.version>4.5.25</vertx.version>
<rocksdb.version>7.9.2</rocksdb.version>
<slf4j.version>2.0.17</slf4j.version>
<commons.collections4.version>4.5.0</commons.collections4.version>
