This is an automated email from the ASF dual-hosted git repository.
snuyanzin pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/flink.git
The following commit(s) were added to refs/heads/master by this push:
new 406568ee12e [FLINK-39146] Update log4j to 2.25.3
406568ee12e is described below
commit 406568ee12e3497f8ce3305ed1864568e791d6e7
Author: Cameron <[email protected]>
AuthorDate: Fri Mar 20 17:56:45 2026 +0000
[FLINK-39146] Update log4j to 2.25.3
---
docs/content.zh/docs/dev/configuration/overview.md | 2 +-
docs/content/docs/dev/configuration/overview.md | 2 +-
pom.xml | 2 +-
tools/releasing/NOTICE-binary_PREAMBLE.txt | 8 ++++----
4 files changed, 7 insertions(+), 7 deletions(-)
diff --git a/docs/content.zh/docs/dev/configuration/overview.md
b/docs/content.zh/docs/dev/configuration/overview.md
index 98153d756f7..0956ee32677 100644
--- a/docs/content.zh/docs/dev/configuration/overview.md
+++ b/docs/content.zh/docs/dev/configuration/overview.md
@@ -102,7 +102,7 @@ ext {
flinkVersion = '{{< version >}}'
scalaBinaryVersion = '{{< scala_version >}}'
slf4jVersion = '1.7.36'
- log4jVersion = '2.24.3'
+ log4jVersion = '2.25.3'
}
sourceCompatibility = javaVersion
targetCompatibility = javaVersion
diff --git a/docs/content/docs/dev/configuration/overview.md
b/docs/content/docs/dev/configuration/overview.md
index ce49eb33ffe..b775b575561 100644
--- a/docs/content/docs/dev/configuration/overview.md
+++ b/docs/content/docs/dev/configuration/overview.md
@@ -104,7 +104,7 @@ ext {
flinkVersion = '{{< version >}}'
scalaBinaryVersion = '{{< scala_version >}}'
slf4jVersion = '1.7.36'
- log4jVersion = '2.24.3'
+ log4jVersion = '2.25.3'
}
sourceCompatibility = javaVersion
targetCompatibility = javaVersion
diff --git a/pom.xml b/pom.xml
index 2bd47d01bdc..df109cffb5f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -134,7 +134,7 @@ under the License.
<source.java.version>11</source.java.version>
<target.java.version>17</target.java.version>
<slf4j.version>1.7.36</slf4j.version>
- <log4j.version>2.24.3</log4j.version>
+ <log4j.version>2.25.3</log4j.version>
<!-- Overwrite default values from parent pom.
IntelliJ IDEA is (sometimes?) using those values to
choose target language level
and thus is changing back to java 1.6 on each maven
re-import -->
diff --git a/tools/releasing/NOTICE-binary_PREAMBLE.txt
b/tools/releasing/NOTICE-binary_PREAMBLE.txt
index 379d058fd3e..8127475e8fb 100644
--- a/tools/releasing/NOTICE-binary_PREAMBLE.txt
+++ b/tools/releasing/NOTICE-binary_PREAMBLE.txt
@@ -8,10 +8,10 @@ Copyright 2014-2026 The Apache Software Foundation
This project bundles the following dependencies under the Apache Software
License 2.0 (http://www.apache.org/licenses/LICENSE-2.0.txt)
-- org.apache.logging.log4j:log4j-api:2.24.3
-- org.apache.logging.log4j:log4j-core:2.24.3
-- org.apache.logging.log4j:log4j-slf4j-impl:2.24.3
-- org.apache.logging.log4j:log4j-1.2-api:2.24.3
+- org.apache.logging.log4j:log4j-api:2.25.3
+- org.apache.logging.log4j:log4j-core:2.25.3
+- org.apache.logging.log4j:log4j-slf4j-impl:2.25.3
+- org.apache.logging.log4j:log4j-1.2-api:2.25.3
This project bundles the following dependencies under the BSD license.
See bundled license files for details.
