From e7b9e5f1c6e8ff10f707c6550d7e27c429334025 Mon Sep 17 00:00:00 2001 From: "octo-sts[bot]" <157150467+octo-sts@users.noreply.github.com> Date: Sat, 20 Dec 2025 11:30:08 +0000 Subject: [PATCH] apache-activemq-artemis/2.44.0-r1: fix GHSA-vc5p-v9hr-52mj --- apache-activemq-artemis.yaml | 2 +- apache-activemq-artemis/pombump-deps.yaml | 3 +++ 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/apache-activemq-artemis.yaml b/apache-activemq-artemis.yaml index 2a8ab691ea6..724361e71bc 100644 --- a/apache-activemq-artemis.yaml +++ b/apache-activemq-artemis.yaml @@ -1,7 +1,7 @@ package: name: apache-activemq-artemis version: "2.44.0" - epoch: 1 # GHSA-84h7-rjj3-6jx4 + epoch: 2 # GHSA-vc5p-v9hr-52mj description: ActiveMQ Artemis is the next generation message broker from Apache ActiveMQ. copyright: - license: Apache-2.0 diff --git a/apache-activemq-artemis/pombump-deps.yaml b/apache-activemq-artemis/pombump-deps.yaml index 7346518d6ed..3e2051c95fd 100644 --- a/apache-activemq-artemis/pombump-deps.yaml +++ b/apache-activemq-artemis/pombump-deps.yaml @@ -14,3 +14,6 @@ patches: - groupId: io.netty artifactId: netty-codec-http version: 4.1.129.Final + - groupId: org.apache.logging.log4j + artifactId: log4j-core + version: 2.25.3