This is an automated email from the ASF dual-hosted git repository.
asf-gitbox-commits pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/ant.git
The following commit(s) were added to refs/heads/master by this push:
new cefcda9a9 bump jakarta.mail dependency
cefcda9a9 is described below
commit cefcda9a9e6dc4cdc6931bcdf8894eda5c606471
Author: Stefan Bodewig <[email protected]>
AuthorDate: Fri May 15 22:30:59 2026 +0200
bump jakarta.mail dependency
---
WHATSNEW | 3 +++
lib/libraries.properties | 2 +-
src/etc/poms/ant-jakartamail/pom.xml | 2 +-
3 files changed, 5 insertions(+), 2 deletions(-)
diff --git a/WHATSNEW b/WHATSNEW
index eda3f69d0..f813d2a03 100644
--- a/WHATSNEW
+++ b/WHATSNEW
@@ -12,6 +12,9 @@ Other changes:
Based on a patch used by the Debian Ant package maintainers.
Part of Bugzilla Report 61269
+ * Upgraded the jakarta.mail dependency to 2.0.2 because of
+ CVE-2025-7962.
+
Fixed bugs:
-----------
diff --git a/lib/libraries.properties b/lib/libraries.properties
index 86fba5a19..15fe1994a 100644
--- a/lib/libraries.properties
+++ b/lib/libraries.properties
@@ -54,7 +54,7 @@ jai-codec.version=1.1.3
netrexx.version=2.05
# Later 1.6 versions call themselves "jakarta.mail" but do not use the
namespace yet
javax.mail.version=1.6.2
-jakarta.mail.version=2.0.1
+jakarta.mail.version=2.0.2
jakarta-regexp.version=1.4
# Later versions of Tomcat provide a jspc task
jasper-compiler.version=4.1.36
diff --git a/src/etc/poms/ant-jakartamail/pom.xml
b/src/etc/poms/ant-jakartamail/pom.xml
index 78e627b0c..f18f09f16 100644
--- a/src/etc/poms/ant-jakartamail/pom.xml
+++ b/src/etc/poms/ant-jakartamail/pom.xml
@@ -49,7 +49,7 @@ xsi:schemaLocation="http://maven.apache.org/POM/4.0.0
https://maven.apache.org/m
See https://eclipse-ee4j.github.io/mail/ -->
<groupId>com.sun.mail</groupId>
<artifactId>jakarta.mail</artifactId>
- <version>2.0.1</version>
+ <version>2.0.2</version>
<scope>compile</scope>
</dependency>
</dependencies>
