This is an automated email from the ASF dual-hosted git repository.
haonan pushed a commit to branch dev/1.3
in repository https://gitbox.apache.org/repos/asf/iotdb.git
The following commit(s) were added to refs/heads/dev/1.3 by this push:
new f7c3153b446 [To dev/1.3]Security fix: Bump Jetty to 9.4.58.v20250814
(CVE-2025-5115) (#17137)
f7c3153b446 is described below
commit f7c3153b44682785cb1e2c6b61f6d5f3cdffab2f
Author: CritasWang <[email protected]>
AuthorDate: Mon Feb 2 14:33:56 2026 +0800
[To dev/1.3]Security fix: Bump Jetty to 9.4.58.v20250814 (CVE-2025-5115)
(#17137)
---
LICENSE-binary | 12 ++++++------
pom.xml | 2 +-
2 files changed, 7 insertions(+), 7 deletions(-)
diff --git a/LICENSE-binary b/LICENSE-binary
index a7df19a1bf4..abbf50c6536 100644
--- a/LICENSE-binary
+++ b/LICENSE-binary
@@ -230,12 +230,12 @@ jakarta.inject:jakarta.inject:2.6.1
at.yawk.lz4:lz4-java:1.10.0
com.github.stephenc.jcip:jcip-annotations:1.0-1
com.github.ben-manes.caffeine:caffeine:2.9.3
-org.eclipse.jetty:jetty-http:9.4.57.v20241219
-org.eclipse.jetty:jetty-io:9.4.57.v20241219
-org.eclipse.jetty:jetty-security:9.4.57.v20241219
-org.eclipse.jetty:jetty-server:9.4.57.v20241219
-org.eclipse.jetty:jetty-servlet:9.4.57.v20241219
-org.eclipse.jetty:jetty-util:9.4.57.v20241219
+org.eclipse.jetty:jetty-http:9.4.58.v20250814
+org.eclipse.jetty:jetty-io:9.4.58.v20250814
+org.eclipse.jetty:jetty-security:9.4.58.v20250814
+org.eclipse.jetty:jetty-server:9.4.58.v20250814
+org.eclipse.jetty:jetty-servlet:9.4.58.v20250814
+org.eclipse.jetty:jetty-util:9.4.58.v20250814
io.jsonwebtoken:jjwt-api:0.12.7
io.jsonwebtoken:jjwt-impl:0.12.7
io.jsonwebtoken:jjwt-jackson:0.12.7
diff --git a/pom.xml b/pom.xml
index aa4e7ab2e42..eb27c1694b4 100644
--- a/pom.xml
+++ b/pom.xml
@@ -109,7 +109,7 @@
<!-- This is the last version to support the javax namespace -->
<jersey.version>2.40</jersey.version>
<!-- This was the last version to support Java 8 -->
- <jetty.version>9.4.57.v20241219</jetty.version>
+ <jetty.version>9.4.58.v20250814</jetty.version>
<jjwt.version>0.12.7</jjwt.version>
<jline.version>3.26.2</jline.version>
<jna.version>5.14.0</jna.version>
