This is an automated email from the ASF dual-hosted git repository.

pjfanning pushed a commit to branch pjfanning-patch-8
in repository https://gitbox.apache.org/repos/asf/drill.git

commit 616c4dadcaf4521b6da9e3a3dec17956b5df1c65
Author: PJ Fanning <[email protected]>
AuthorDate: Mon Apr 20 15:27:06 2026 +0200

    Upgrade log4j version from 2.23.1 to 2.25.4 du to CVEs
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 85b2bcb457..e9191d9709 100644
--- a/pom.xml
+++ b/pom.xml
@@ -112,7 +112,7 @@
     <kerby.version>2.0.3</kerby.version>
     <libthrift.version>0.18.1</libthrift.version>
     <license.skip>true</license.skip>
-    <log4j.version>2.23.1</log4j.version>
+    <log4j.version>2.25.4</log4j.version>
     <!-- Upgrading logback further breaks JDK 8 build compatibility -->
     <logback.version>1.3.16</logback.version>
     <maven.compiler.release>11</maven.compiler.release>

Reply via email to