> ## Documentation Index
> Fetch the complete documentation index at: https://docs.streamnative.io/llms.txt
> Use this file to discover all available pages before exploring further.

# V4.2.5.5

# StreamNative Weekly Release Notes v4.2.5.5

## Download

### Distributions

* [https://github.com/streamnative/pulsar/releases/tag/v4.2.5.5](https://github.com/streamnative/pulsar/releases/tag/v4.2.5.5)

### Packages

* [Maven Central](https://search.maven.org/artifact/io.streamnative/pulsar/4.2.5.5/pom)

### Images

* [sn-platform](https://hub.docker.com/layers/streamnative/sn-platform/4.2.5.5/images/sha256-9f98d0fafbbcae7f3b8f9b688827235ae9b49e53d39f607e8ff869ed7b1a042c)

* [sn-platform-slim](https://hub.docker.com/layers/streamnative/sn-platform-slim/4.2.5.5/images/sha256-1833dcd0ffb8f20248748bd337016b6dcdd8b8db762a5e943b46a57406c6f1c5)

* [private-cloud](https://hub.docker.com/layers/streamnative/private-cloud/4.2.5.5/images/sha256-1833dcd0ffb8f20248748bd337016b6dcdd8b8db762a5e943b46a57406c6f1c5)

## General Changes

### Apache Pulsar

([#27227](https://github.com/apache/pulsar/pull/27227)) \[improve]\[meta]\[branch-4.2] Upgrade Oxia Java client to 0.10.4

([#27172](https://github.com/apache/pulsar/pull/27172)) \[improve]\[meta]\[branch-4.2] Upgrade Oxia Java client to 0.10.3

([#27180](https://github.com/apache/pulsar/pull/27180)) \[improve]\[misc] Upgrade Jetty to 12.1.14 and Conscrypt to 2.7.0

### MoP

9e34da5a Fix MQTT stats tests with Gson map deserialization changes

### KoP

\[branch-4.2] Bump Pulsar BOM to 4.2.5.5 and align test dependencies

### StreamNative Pulsar Plugins

fix(detector): upgrade go-jose to v4.1.6 for security fixes

22434ccea Remove log4j dependency and rely on bom

93cd73793 Remove opentelmetry dependency and rely on bom

c76e8c5cc Remove netty dependency and rely on bom

### pulsarctl

fix: install Trivy directly from GitHub Releases

### Cloud Pulsar Plugins

\[Rest API Interceptor] Export billing resource usage

\[Rest API Interceptor] Always report resource usage metrics

### Function Mesh Worker Service

8c6cdaba ci: Fix the free-disk-space action reference

\[branch-4.2] Run the CI Oxia server from oxia/oxia:0.16.12

### StreamNative Unified RBAC

Bump the RBAC SDKs to 1.17.3 (4.2)

## Security Fixes

### Apache Pulsar

([#27343](https://github.com/apache/pulsar/pull/27343)) \[fix]\[sec] Upgrade ZooKeeper to 3.9.7 to address several CVEs

([#27311](https://github.com/apache/pulsar/pull/27311)) \[fix]\[sec]\[branch-4.2] Upgrade Netty to 4.1.140 and netty-tcnative to 2.0.85 to address several CVEs and bugs

([#27186](https://github.com/apache/pulsar/pull/27186)) \[fix]\[sec] Upgrade zstd-jni to 1.5.7-25

([#27191](https://github.com/apache/pulsar/pull/27191)) \[fix]\[sec] Upgrade OkHttp to 5.5.1 and Okio to 3.18.2

([#27189](https://github.com/apache/pulsar/pull/27189)) \[fix]\[sec] Upgrade JLine to 4.4.8

([#27192](https://github.com/apache/pulsar/pull/27192)) \[fix]\[sec] Upgrade Gson to 2.15.0

([#27193](https://github.com/apache/pulsar/pull/27193)) \[fix]\[sec] Upgrade Byte Buddy to 1.18.16

([#27190](https://github.com/apache/pulsar/pull/27190)) \[fix]\[sec] Upgrade commons-codec to 1.23.0

([#27187](https://github.com/apache/pulsar/pull/27187)) \[fix]\[sec] Upgrade lz4-java to 1.12.1

([#27184](https://github.com/apache/pulsar/pull/27184)) \[fix]\[sec] Upgrade snappy-java to 1.1.10.12

([#27183](https://github.com/apache/pulsar/pull/27183)) \[fix]\[sec] Upgrade Vert.x to 4.5.35

([#26898](https://github.com/apache/pulsar/pull/26898)) \[fix]\[sec]\[branch-4.x] Upgrade Jackson to 2.18.12


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.