This is an automated email from the ASF dual-hosted git repository. eolivelli pushed a commit to branch branch-2.7 in repository https://gitbox.apache.org/repos/asf/pulsar.git
The following commit(s) were added to refs/heads/branch-2.7 by this push: new c941860 [Security] Upgrade commons-io to address CVE-2021-29425 (#10287) c941860 is described below commit c941860dc229f318cd9c9b67dbaf28d30cc3a59e Author: Lari Hotari <lhot...@users.noreply.github.com> AuthorDate: Tue Apr 20 22:02:51 2021 +0300 [Security] Upgrade commons-io to address CVE-2021-29425 (#10287) * [Security] Upgrade commons-io to address CVE-2021-29425 * Upgrade license (cherry picked from commit 9d7cad44030f6a02578bb8d4c73e590ddc8a8c1d) --- distribution/server/src/assemble/LICENSE.bin.txt | 2 +- pom.xml | 2 +- pulsar-sql/presto-distribution/LICENSE | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/distribution/server/src/assemble/LICENSE.bin.txt b/distribution/server/src/assemble/LICENSE.bin.txt index fff2916..105f3c5 100644 --- a/distribution/server/src/assemble/LICENSE.bin.txt +++ b/distribution/server/src/assemble/LICENSE.bin.txt @@ -350,7 +350,7 @@ The Apache Software License, Version 2.0 - commons-codec-commons-codec-1.10.jar - commons-collections-commons-collections-3.2.2.jar - commons-configuration-commons-configuration-1.10.jar - - commons-io-commons-io-2.5.jar + - commons-io-commons-io-2.8.0.jar - commons-lang-commons-lang-2.6.jar - commons-logging-commons-logging-1.1.1.jar - org.apache.commons-commons-collections4-4.1.jar diff --git a/pom.xml b/pom.xml index 089bbe5..3c84550 100644 --- a/pom.xml +++ b/pom.xml @@ -162,7 +162,7 @@ flexible messaging model and an intuitive client API.</description> <jcommander.version>1.78</jcommander.version> <commons-lang3.version>3.6</commons-lang3.version> <commons-configuration.version>1.10</commons-configuration.version> - <commons-io.version>2.5</commons-io.version> + <commons-io.version>2.8.0</commons-io.version> <commons-codec.version>1.10</commons-codec.version> <javax.ws.rs-api.version>2.1</javax.ws.rs-api.version> <log4j.version>1.2.17</log4j.version> diff --git a/pulsar-sql/presto-distribution/LICENSE b/pulsar-sql/presto-distribution/LICENSE index 99217c75..d627cd9 100644 --- a/pulsar-sql/presto-distribution/LICENSE +++ b/pulsar-sql/presto-distribution/LICENSE @@ -428,7 +428,7 @@ The Apache Software License, Version 2.0 - commons-codec-1.10.jar - commons-collections4-4.1.jar - commons-configuration-1.10.jar - - commons-io-2.5.jar + - commons-io-2.8.0.jar - commons-lang-2.6.jar - commons-logging-1.2.jar * GSON