This is an automated email from the ASF dual-hosted git repository. lhotari pushed a commit to branch branch-4.0 in repository https://gitbox.apache.org/repos/asf/pulsar.git
commit be1ec2c9d26dda5c402f5d9846d2ee521fedcc9e Author: Lari Hotari <[email protected]> AuthorDate: Thu May 21 09:44:56 2026 +0300 [fix][sec] Upgrade commons-configuration2 to 2.15.0 to address CVE-2026-45205 (#25844) (cherry picked from commit 7220158b928b2b9dc8151400a1a596d93ecd5637) --- distribution/server/src/assemble/LICENSE.bin.txt | 2 +- pom.xml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/distribution/server/src/assemble/LICENSE.bin.txt b/distribution/server/src/assemble/LICENSE.bin.txt index 46579719f5f..40835a4d37a 100644 --- a/distribution/server/src/assemble/LICENSE.bin.txt +++ b/distribution/server/src/assemble/LICENSE.bin.txt @@ -289,7 +289,7 @@ The Apache Software License, Version 2.0 - commons-logging-commons-logging-1.3.5.jar - org.apache.commons-commons-collections4-4.5.0.jar - org.apache.commons-commons-compress-1.28.0.jar - - org.apache.commons-commons-configuration2-2.12.0.jar + - org.apache.commons-commons-configuration2-2.15.0.jar - org.apache.commons-commons-lang3-3.19.0.jar - org.apache.commons-commons-text-1.14.0.jar * Netty diff --git a/pom.xml b/pom.xml index e911ac4320b..2d135922faf 100644 --- a/pom.xml +++ b/pom.xml @@ -371,7 +371,7 @@ flexible messaging model and an intuitive client API.</description> <checkerframework.version>3.33.0</checkerframework.version> <nimbus-jose-jwt.version>9.37.4</nimbus-jose-jwt.version> <commons-beanutils.version>1.11.0</commons-beanutils.version> - <commons-configuration2.version>2.12.0</commons-configuration2.version> + <commons-configuration2.version>2.15.0</commons-configuration2.version> <mina-core.version>2.1.10</mina-core.version> <lz4java.version>1.10.3</lz4java.version> </properties>
