This is an automated email from the ASF dual-hosted git repository.
cgivre pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/drill.git
The following commit(s) were added to refs/heads/master by this push:
new 33af5020a6 Upgrade log4j version from 2.23.1 to 2.25.4 du to CVEs
(#3046)
33af5020a6 is described below
commit 33af5020a63f1eb7afd132bc3e6b3e1cdc0a3340
Author: PJ Fanning <[email protected]>
AuthorDate: Mon Apr 27 21:26:40 2026 +0200
Upgrade log4j version from 2.23.1 to 2.25.4 du to CVEs (#3046)
---
pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/pom.xml b/pom.xml
index 85b2bcb457..e9191d9709 100644
--- a/pom.xml
+++ b/pom.xml
@@ -112,7 +112,7 @@
<kerby.version>2.0.3</kerby.version>
<libthrift.version>0.18.1</libthrift.version>
<license.skip>true</license.skip>
- <log4j.version>2.23.1</log4j.version>
+ <log4j.version>2.25.4</log4j.version>
<!-- Upgrading logback further breaks JDK 8 build compatibility -->
<logback.version>1.3.16</logback.version>
<maven.compiler.release>11</maven.compiler.release>
