This is an automated email from the ASF dual-hosted git repository.

bipinprasad pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/storm.git


The following commit(s) were added to refs/heads/master by this push:
     new 1713a9c  [STORM-3837] upgrade activemq-client due to cve (#3457)
1713a9c is described below

commit 1713a9c37b985188349bcf8d3cc6aad41c5bd8b7
Author: PJ Fanning <[email protected]>
AuthorDate: Fri Apr 1 18:18:57 2022 +0200

    [STORM-3837] upgrade activemq-client due to cve (#3457)
    
    * [STORM-3837] upgrade activemq-client due to cve
    
    * Update DEPENDENCY-LICENSES
    
    * Update validate-license-files.py
    
    * try to fix license file
---
 DEPENDENCY-LICENSES | 12 ++++++------
 pom.xml             |  2 +-
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/DEPENDENCY-LICENSES b/DEPENDENCY-LICENSES
index df7d72c..e08a168 100644
--- a/DEPENDENCY-LICENSES
+++ b/DEPENDENCY-LICENSES
@@ -9,11 +9,11 @@ List of third-party dependencies grouped by their license 
type.
 
     Apache License, Version 2.0
 
-        * ActiveMQ :: Broker (org.apache.activemq:activemq-broker:5.15.8 - 
http://activemq.apache.org/activemq-broker)
-        * ActiveMQ :: Client (org.apache.activemq:activemq-client:5.15.8 - 
http://activemq.apache.org/activemq-client)
-        * ActiveMQ :: KahaDB Store 
(org.apache.activemq:activemq-kahadb-store:5.15.8 - 
http://activemq.apache.org/activemq-kahadb-store)
-        * ActiveMQ :: MQTT Protocol (org.apache.activemq:activemq-mqtt:5.15.8 
- http://activemq.apache.org/activemq-mqtt)
-        * ActiveMQ :: Openwire Legacy Support 
(org.apache.activemq:activemq-openwire-legacy:5.15.8 - 
http://activemq.apache.org/activemq-openwire-legacy)
+        * ActiveMQ :: Broker (org.apache.activemq:activemq-broker:5.15.15 - 
http://activemq.apache.org/activemq-broker)
+        * ActiveMQ :: Client (org.apache.activemq:activemq-client:5.15.15 - 
http://activemq.apache.org/activemq-client)
+        * ActiveMQ :: KahaDB Store 
(org.apache.activemq:activemq-kahadb-store:5.15.15 - 
http://activemq.apache.org/activemq-kahadb-store)
+        * ActiveMQ :: MQTT Protocol (org.apache.activemq:activemq-mqtt:5.15.15 
- http://activemq.apache.org/activemq-mqtt)
+        * ActiveMQ :: Openwire Legacy Support 
(org.apache.activemq:activemq-openwire-legacy:5.15.15 - 
http://activemq.apache.org/activemq-openwire-legacy)
         * ActiveMQ Protocol Buffers Implementation and Compiler 
(org.apache.activemq.protobuf:activemq-protobuf:1.1 - 
http://activemq.apache.org/activemq-protobuf)
         * Aether :: API (org.sonatype.aether:aether-api:1.7 - 
http://aether.sonatype.org/aether-api/)
         * Aether :: Implementation (org.sonatype.aether:aether-impl:1.7 - 
http://aether.sonatype.org/aether-impl/)
@@ -49,7 +49,7 @@ List of third-party dependencies grouped by their license 
type.
         * Apache Commons Lang (org.apache.commons:commons-lang3:3.8.1 - 
http://commons.apache.org/proper/commons-lang/)
         * Apache Commons Logging (commons-logging:commons-logging:1.2 - 
http://commons.apache.org/proper/commons-logging/)
         * Apache Commons Math (org.apache.commons:commons-math3:3.6.1 - 
http://commons.apache.org/proper/commons-math/)
-        * Apache Commons Net (commons-net:commons-net:3.6 - 
http://commons.apache.org/proper/commons-net/)
+        * Apache Commons Net (commons-net:commons-net:3.8.0 - 
https://commons.apache.org/proper/commons-net/)
         * Apache Commons Pool (org.apache.commons:commons-pool2:2.4.2 - 
http://commons.apache.org/proper/commons-pool/)
         * Apache Commons Text (org.apache.commons:commons-text:1.2 - 
http://commons.apache.org/proper/commons-text/)
         * Apache Curator (org.apache.curator:apache-curator:2.7.1 - 
http://curator.apache.org)
diff --git a/pom.xml b/pom.xml
index bb0cc72..2645ffe 100644
--- a/pom.xml
+++ b/pom.xml
@@ -335,7 +335,7 @@
         <solr.version>5.2.1</solr.version>
         <jpmml.version>1.0.22</jpmml.version>
         <jedis.version>2.9.0</jedis.version>
-        <activemq.version>5.15.8</activemq.version>
+        <activemq.version>5.15.15</activemq.version>
         <rocketmq.version>4.2.0</rocketmq.version>
 
         <jackson.version>2.10.0</jackson.version>

Reply via email to