Bump vertx.version from 4.5.7 to 4.5.11 to address CVE-2024-8391 (#4545)

Signed-off-by: Zhangjian He <[email protected]>
apache · Jan 10, 2025 · 3732f4b · 3732f4b
1 parent edb0672
commit 3732f4b
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 11 deletions.
diff --git a/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt b/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt
@@ -251,11 +251,11 @@ Apache Software License, Version 2.
 - lib/io.prometheus-simpleclient_tracer_common-0.15.0.jar [12]
 - lib/io.prometheus-simpleclient_tracer_otel-0.15.0.jar [12]
 - lib/io.prometheus-simpleclient_tracer_otel_agent-0.15.0.jar [12]
-- lib/io.vertx-vertx-auth-common-4.5.7.jar [13]
-- lib/io.vertx-vertx-bridge-common-4.5.7.jar [14]
-- lib/io.vertx-vertx-core-4.5.7.jar [15]
-- lib/io.vertx-vertx-web-4.5.7.jar [16]
-- lib/io.vertx-vertx-web-common-4.5.7.jar [16]
+- lib/io.vertx-vertx-auth-common-4.5.11.jar [13]
+- lib/io.vertx-vertx-bridge-common-4.5.11.jar [14]
+- lib/io.vertx-vertx-core-4.5.11.jar [15]
+- lib/io.vertx-vertx-web-4.5.11.jar [16]
+- lib/io.vertx-vertx-web-common-4.5.11.jar [16]
 - lib/org.apache.logging.log4j-log4j-api-2.23.1.jar [17]
 - lib/org.apache.logging.log4j-log4j-core-2.23.1.jar [17]
 - lib/org.apache.logging.log4j-log4j-slf4j2-impl-2.23.1.jar [17]

diff --git a/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt b/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt
@@ -251,11 +251,11 @@ Apache Software License, Version 2.
 - lib/io.prometheus-simpleclient_tracer_common-0.15.0.jar [12]
 - lib/io.prometheus-simpleclient_tracer_otel-0.15.0.jar [12]
 - lib/io.prometheus-simpleclient_tracer_otel_agent-0.15.0.jar [12]
-- lib/io.vertx-vertx-auth-common-4.5.7.jar [13]
-- lib/io.vertx-vertx-bridge-common-4.5.7.jar [14]
-- lib/io.vertx-vertx-core-4.5.7.jar [15]
-- lib/io.vertx-vertx-web-4.5.7.jar [16]
-- lib/io.vertx-vertx-web-common-4.5.7.jar [16]
+- lib/io.vertx-vertx-auth-common-4.5.11.jar [13]
+- lib/io.vertx-vertx-bridge-common-4.5.11.jar [14]
+- lib/io.vertx-vertx-core-4.5.11.jar [15]
+- lib/io.vertx-vertx-web-4.5.11.jar [16]
+- lib/io.vertx-vertx-web-common-4.5.11.jar [16]
 - lib/org.apache.logging.log4j-log4j-api-2.23.1.jar [17]
 - lib/org.apache.logging.log4j-log4j-core-2.23.1.jar [17]
 - lib/org.apache.logging.log4j-log4j-slf4j2-impl-2.23.1.jar [17]

diff --git a/pom.xml b/pom.xml
@@ -174,7 +174,7 @@
     <spotless.version>2.43.0</spotless.version>
     <javax-annotations-api.version>1.3.2</javax-annotations-api.version>
     <testcontainers.version>1.19.4</testcontainers.version>
-    <vertx.version>4.5.7</vertx.version>
+    <vertx.version>4.5.11</vertx.version>
     <zookeeper.version>3.9.3</zookeeper.version>
     <snappy.version>1.1.10.5</snappy.version>
     <jctools.version>2.1.2</jctools.version>