From e7b9e5f1c6e8ff10f707c6550d7e27c429334025 Mon Sep 17 00:00:00 2001 From: "octo-sts[bot]" <157150467+octo-sts@users.noreply.github.com> Date: Sat, 20 Dec 2025 11:30:08 +0000 Subject: [PATCH 1/2] apache-activemq-artemis/2.44.0-r1: fix GHSA-vc5p-v9hr-52mj --- apache-activemq-artemis.yaml | 2 +- apache-activemq-artemis/pombump-deps.yaml | 3 +++ 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/apache-activemq-artemis.yaml b/apache-activemq-artemis.yaml index 2a8ab691ea6..724361e71bc 100644 --- a/apache-activemq-artemis.yaml +++ b/apache-activemq-artemis.yaml @@ -1,7 +1,7 @@ package: name: apache-activemq-artemis version: "2.44.0" - epoch: 1 # GHSA-84h7-rjj3-6jx4 + epoch: 2 # GHSA-vc5p-v9hr-52mj description: ActiveMQ Artemis is the next generation message broker from Apache ActiveMQ. copyright: - license: Apache-2.0 diff --git a/apache-activemq-artemis/pombump-deps.yaml b/apache-activemq-artemis/pombump-deps.yaml index 7346518d6ed..3e2051c95fd 100644 --- a/apache-activemq-artemis/pombump-deps.yaml +++ b/apache-activemq-artemis/pombump-deps.yaml @@ -14,3 +14,6 @@ patches: - groupId: io.netty artifactId: netty-codec-http version: 4.1.129.Final + - groupId: org.apache.logging.log4j + artifactId: log4j-core + version: 2.25.3 From ebecba44adc9bd8b762cea0dfb5471704f5ab416 Mon Sep 17 00:00:00 2001 From: Ankush Pathak Date: Fri, 26 Dec 2025 15:28:54 +0000 Subject: [PATCH 2/2] fix(apache-activemq-artemis): Bump log4j version through pombump properties Signed-off-by: Ankush Pathak --- apache-activemq-artemis/pombump-deps.yaml | 3 --- apache-activemq-artemis/pombump-properties.yaml | 2 ++ 2 files changed, 2 insertions(+), 3 deletions(-) diff --git a/apache-activemq-artemis/pombump-deps.yaml b/apache-activemq-artemis/pombump-deps.yaml index 3e2051c95fd..7346518d6ed 100644 --- a/apache-activemq-artemis/pombump-deps.yaml +++ b/apache-activemq-artemis/pombump-deps.yaml @@ -14,6 +14,3 @@ patches: - groupId: io.netty artifactId: netty-codec-http version: 4.1.129.Final - - groupId: org.apache.logging.log4j - artifactId: log4j-core - version: 2.25.3 diff --git a/apache-activemq-artemis/pombump-properties.yaml b/apache-activemq-artemis/pombump-properties.yaml index 62a31032c1f..d24557a37c0 100644 --- a/apache-activemq-artemis/pombump-properties.yaml +++ b/apache-activemq-artemis/pombump-properties.yaml @@ -7,3 +7,5 @@ properties: value: "3.18.0" - property: zookeeper.version value: "3.9.4" + - property: log4j.version + value: "2.25.3"