This is an automated email from the ASF dual-hosted git repository.
petersomogyi pushed a commit to branch branch-2.6
in repository https://gitbox.apache.org/repos/asf/hbase.git
The following commit(s) were added to refs/heads/branch-2.6 by this push:
new 82d68eb97f0 HBASE-30193 Exclude transitive jakarta.mail dependency
(CVE-2025-7962) (#8296)
82d68eb97f0 is described below
commit 82d68eb97f0936e70140817c366e10d34e654eec
Author: Xavier Fernandis <[email protected]>
AuthorDate: Tue Jun 2 19:24:26 2026 +0530
HBASE-30193 Exclude transitive jakarta.mail dependency (CVE-2025-7962)
(#8296)
Signed-off-by: Peter Somogyi <[email protected]>
(cherry picked from commit 2eb5a34603fcb3ca035f63500ab2b6835d46a5ad)
---
pom.xml | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/pom.xml b/pom.xml
index 7d62478c3d9..e911a7a52a8 100644
--- a/pom.xml
+++ b/pom.xml
@@ -1627,6 +1627,10 @@
<groupId>com.sun.xml.ws</groupId>
<artifactId>samples</artifactId>
</exclusion>
+ <exclusion>
+ <groupId>com.sun.mail</groupId>
+ <artifactId>jakarta.mail</artifactId>
+ </exclusion>
</exclusions>
</dependency>
<dependency>
