This is an automated email from the ASF dual-hosted git repository.
merlimat pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/pulsar.git
The following commit(s) were added to refs/heads/master by this push:
new 2964ab59af0 [fix][sec] Upgrade vertx to 4.5.27 to address
CVE-2026-6860 (#25745)
2964ab59af0 is described below
commit 2964ab59af0fb65406b9cfe3a632f4de5c628b9a
Author: Lari Hotari <[email protected]>
AuthorDate: Mon May 11 23:36:17 2026 +0300
[fix][sec] Upgrade vertx to 4.5.27 to address CVE-2026-6860 (#25745)
---
distribution/server/src/assemble/LICENSE.bin.txt | 10 +++++-----
gradle/libs.versions.toml | 2 +-
2 files changed, 6 insertions(+), 6 deletions(-)
diff --git a/distribution/server/src/assemble/LICENSE.bin.txt
b/distribution/server/src/assemble/LICENSE.bin.txt
index 090d001ef61..1996959a004 100644
--- a/distribution/server/src/assemble/LICENSE.bin.txt
+++ b/distribution/server/src/assemble/LICENSE.bin.txt
@@ -507,11 +507,11 @@ The Apache Software License, Version 2.0
- org.jctools-jctools-core-4.0.6.jar
- org.jctools-jctools-core-jdk11-4.0.6.jar
* Vertx
- - io.vertx-vertx-auth-common-4.5.25.jar
- - io.vertx-vertx-bridge-common-4.5.25.jar
- - io.vertx-vertx-core-4.5.25.jar
- - io.vertx-vertx-web-4.5.25.jar
- - io.vertx-vertx-web-common-4.5.25.jar
+ - io.vertx-vertx-auth-common-4.5.27.jar
+ - io.vertx-vertx-bridge-common-4.5.27.jar
+ - io.vertx-vertx-core-4.5.27.jar
+ - io.vertx-vertx-web-4.5.27.jar
+ - io.vertx-vertx-web-common-4.5.27.jar
* Apache ZooKeeper
- org.apache.zookeeper-zookeeper-jute-3.9.5.jar
* Snappy Java
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 05ba4582ae6..74574ff138d 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -65,7 +65,7 @@ avro = "1.12.0"
gson = "2.13.2"
snakeyaml = "2.0"
# Vert.x
-vertx = "4.5.25"
+vertx = "4.5.27"
# Networking / HTTP
asynchttpclient = "2.14.5"
conscrypt = "2.5.2"
