This is an automated email from the ASF dual-hosted git repository.
bipinprasad pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/storm.git
The following commit(s) were added to refs/heads/master by this push:
new 1713a9c [STORM-3837] upgrade activemq-client due to cve (#3457)
1713a9c is described below
commit 1713a9c37b985188349bcf8d3cc6aad41c5bd8b7
Author: PJ Fanning <[email protected]>
AuthorDate: Fri Apr 1 18:18:57 2022 +0200
[STORM-3837] upgrade activemq-client due to cve (#3457)
* [STORM-3837] upgrade activemq-client due to cve
* Update DEPENDENCY-LICENSES
* Update validate-license-files.py
* try to fix license file
---
DEPENDENCY-LICENSES | 12 ++++++------
pom.xml | 2 +-
2 files changed, 7 insertions(+), 7 deletions(-)
diff --git a/DEPENDENCY-LICENSES b/DEPENDENCY-LICENSES
index df7d72c..e08a168 100644
--- a/DEPENDENCY-LICENSES
+++ b/DEPENDENCY-LICENSES
@@ -9,11 +9,11 @@ List of third-party dependencies grouped by their license
type.
Apache License, Version 2.0
- * ActiveMQ :: Broker (org.apache.activemq:activemq-broker:5.15.8 -
http://activemq.apache.org/activemq-broker)
- * ActiveMQ :: Client (org.apache.activemq:activemq-client:5.15.8 -
http://activemq.apache.org/activemq-client)
- * ActiveMQ :: KahaDB Store
(org.apache.activemq:activemq-kahadb-store:5.15.8 -
http://activemq.apache.org/activemq-kahadb-store)
- * ActiveMQ :: MQTT Protocol (org.apache.activemq:activemq-mqtt:5.15.8
- http://activemq.apache.org/activemq-mqtt)
- * ActiveMQ :: Openwire Legacy Support
(org.apache.activemq:activemq-openwire-legacy:5.15.8 -
http://activemq.apache.org/activemq-openwire-legacy)
+ * ActiveMQ :: Broker (org.apache.activemq:activemq-broker:5.15.15 -
http://activemq.apache.org/activemq-broker)
+ * ActiveMQ :: Client (org.apache.activemq:activemq-client:5.15.15 -
http://activemq.apache.org/activemq-client)
+ * ActiveMQ :: KahaDB Store
(org.apache.activemq:activemq-kahadb-store:5.15.15 -
http://activemq.apache.org/activemq-kahadb-store)
+ * ActiveMQ :: MQTT Protocol (org.apache.activemq:activemq-mqtt:5.15.15
- http://activemq.apache.org/activemq-mqtt)
+ * ActiveMQ :: Openwire Legacy Support
(org.apache.activemq:activemq-openwire-legacy:5.15.15 -
http://activemq.apache.org/activemq-openwire-legacy)
* ActiveMQ Protocol Buffers Implementation and Compiler
(org.apache.activemq.protobuf:activemq-protobuf:1.1 -
http://activemq.apache.org/activemq-protobuf)
* Aether :: API (org.sonatype.aether:aether-api:1.7 -
http://aether.sonatype.org/aether-api/)
* Aether :: Implementation (org.sonatype.aether:aether-impl:1.7 -
http://aether.sonatype.org/aether-impl/)
@@ -49,7 +49,7 @@ List of third-party dependencies grouped by their license
type.
* Apache Commons Lang (org.apache.commons:commons-lang3:3.8.1 -
http://commons.apache.org/proper/commons-lang/)
* Apache Commons Logging (commons-logging:commons-logging:1.2 -
http://commons.apache.org/proper/commons-logging/)
* Apache Commons Math (org.apache.commons:commons-math3:3.6.1 -
http://commons.apache.org/proper/commons-math/)
- * Apache Commons Net (commons-net:commons-net:3.6 -
http://commons.apache.org/proper/commons-net/)
+ * Apache Commons Net (commons-net:commons-net:3.8.0 -
https://commons.apache.org/proper/commons-net/)
* Apache Commons Pool (org.apache.commons:commons-pool2:2.4.2 -
http://commons.apache.org/proper/commons-pool/)
* Apache Commons Text (org.apache.commons:commons-text:1.2 -
http://commons.apache.org/proper/commons-text/)
* Apache Curator (org.apache.curator:apache-curator:2.7.1 -
http://curator.apache.org)
diff --git a/pom.xml b/pom.xml
index bb0cc72..2645ffe 100644
--- a/pom.xml
+++ b/pom.xml
@@ -335,7 +335,7 @@
<solr.version>5.2.1</solr.version>
<jpmml.version>1.0.22</jpmml.version>
<jedis.version>2.9.0</jedis.version>
- <activemq.version>5.15.8</activemq.version>
+ <activemq.version>5.15.15</activemq.version>
<rocketmq.version>4.2.0</rocketmq.version>
<jackson.version>2.10.0</jackson.version>