Skip to content

Backport develop commits to support/2.0 for the 2.0.3 release - #8039

Merged
JinwooHwang merged 1 commit into
apache:support/2.0from
JinwooHwang:backport/2.0.3
Aug 26, 2026
Merged

Backport develop commits to support/2.0 for the 2.0.3 release#8039
JinwooHwang merged 1 commit into
apache:support/2.0from
JinwooHwang:backport/2.0.3

Conversation

@JinwooHwang

@JinwooHwang JinwooHwang commented Aug 24, 2026

Copy link
Copy Markdown
Contributor

Backports 10 commits from develop to support/2.0 for the 2.0.3 release.

Security remediations (dependency upgrades)

Advisory Component Change JIRA Upstream PR
CVE-2026-54428 httpcore5, httpcore5-h2 5.3.6 → 5.4.3 GEODE-10590 #8016
GHSA-2m67-wjpj-xhg9 Jackson 2.21.2 → 2.21.5 GEODE-10589 #8015
CVE-2026-40984 Micrometer 1.14.0 → 1.15.12 GEODE-10592 #8018
CVE-2026-8763 Bouncy Castle 1.84 → 1.85 GEODE-10606 #8032
CVE-2026-10050 Jetty 12.0.33 → 12.0.37 GEODE-10605 #8031
CVE-2026-49268 Apache Shiro 2.1.0 → 3.0.0 GEODE-10607 #8033
SNYK-JAVA-ORGAPACHELOGGINGLOG4J-17954276 Log4j 2.25.4 → 2.25.5 GEODE-10604 #8030

@JinwooHwang
JinwooHwang merged commit 8b4a2ad into apache:support/2.0 Aug 26, 2026
15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants