This is an automated email from the ASF dual-hosted git repository.
jinwoo pushed a change to branch support/2.0
in repository https://gitbox.apache.org/repos/asf/geode.git
from 3ea326cc64 GEODE-10543: Upgrade Log4j from 2.17.2 to 2.25.3 to
remediate CVE-202… (#7975)
new ed45800813 GEODE-10555: Remediate CVE-2024-12798 CVE-2024-12801
CVE-2025-11226 CVE-2026-1225 (#7982)
new 7362e23006 GEODE-10565: Jackson upgrade due to security
vulnerabilities (#7990)
new 1da008808c GEODE-10568: Remediation of CVE-2026-1605 and
CVE-2025-11143 (#7992)
new 1f9e9291fb GEODE-10559: Introduction of Security Realm to Security
Manager (CVE-2026-23903 remediation) (#7986)
The 4 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../src/test/resources/expected-pom.xml | 10 +-
.../gradle/plugins/DependencyConstraints.groovy | 8 +-
build.gradle | 3 +
.../src/test/resources/expected-pom.xml | 8 +
.../src/test/resources/expected-pom.xml | 28 ++
.../session/tests/GenericAppServerInstall.java | 2 +-
.../integrationTest/resources/assembly_content.txt | 350 +++++++++++++++++--
.../integrationTest/resources/expected_jars.txt | 6 +-
.../resources/gfsh_dependency_classpath.txt | 74 ++--
geode-common/src/test/resources/expected-pom.xml | 12 +
.../src/test/resources/expected-pom.xml | 8 +
.../src/test/resources/expected-pom.xml | 52 +++
.../security/IntegratedSecurityService.java | 10 +-
.../internal/security/SecurityServiceFactory.java | 16 +-
.../security/shiro/SecurityManagerProvider.java | 39 ++-
.../InternalDataSerializerShiroAcceptListTest.java | 9 +-
.../security/IntegratedSecurityServiceTest.java | 8 +-
geode-core/src/test/resources/expected-pom.xml | 148 ++++++++
geode-cq/src/test/resources/expected-pom.xml | 20 ++
.../src/test/resources/expected-pom.xml | 2 +-
geode-dunit/src/test/resources/expected-pom.xml | 88 +++++
geode-gfsh/src/test/resources/expected-pom.xml | 381 +++++----------------
.../src/test/resources/expected-pom.xml | 28 ++
geode-jmh/src/test/resources/expected-pom.xml | 4 +
geode-junit/src/test/resources/expected-pom.xml | 88 +++++
geode-log4j/src/test/resources/expected-pom.xml | 32 ++
geode-logging/src/test/resources/expected-pom.xml | 8 +
geode-lucene/src/test/resources/expected-pom.xml | 52 +++
.../src/test/resources/expected-pom.xml | 36 ++
.../src/test/resources/expected-pom.xml | 36 ++
.../src/test/resources/expected-pom.xml | 16 +
.../src/test/resources/expected-pom.xml | 12 +
.../src/test/resources/expected-pom.xml | 20 ++
.../src/test/resources/expected-pom.xml | 20 ++
.../resources/dependency_classpath.txt | 82 ++---
.../src/test/resources/expected-pom.xml | 76 ++++
.../src/test/resources/expected-pom.xml | 20 ++
geode-unsafe/src/test/resources/expected-pom.xml | 2 +-
geode-wan/src/test/resources/expected-pom.xml | 28 ++
39 files changed, 1397 insertions(+), 445 deletions(-)
