This is an automated email from the ASF dual-hosted git repository.
ayushtkn pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/hive.git
The following commit(s) were added to refs/heads/master by this push:
new 37c563397bd HIVE-30066: Upgrade log4j to 2.26.1 to fix CVE-2026-34481
(#6795)
37c563397bd is described below
commit 37c563397bd190859ee5c27332b6be1e9f73dfb6
Author: Akanksha kedia <[email protected]>
AuthorDate: Sat Sep 26 15:10:34 2026 +0530
HIVE-30066: Upgrade log4j to 2.26.1 to fix CVE-2026-34481 (#6795)
---
pom.xml | 2 +-
standalone-metastore/pom.xml | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/pom.xml b/pom.xml
index 9b9b8cad29d..a887c6333b8 100644
--- a/pom.xml
+++ b/pom.xml
@@ -189,7 +189,7 @@
<libfb303.version>0.9.3</libfb303.version>
<!-- Thrift version must be inline with one installed in the CI (Docker
image referenced in the Jenkinsfile) -->
<libthrift.version>0.16.0</libthrift.version>
- <log4j2.version>2.25.4</log4j2.version>
+ <log4j2.version>2.26.1</log4j2.version>
<mariadb.version>2.5.0</mariadb.version>
<mssql.version>6.2.1.jre8</mssql.version>
<mysql.version>8.2.0</mysql.version>
diff --git a/standalone-metastore/pom.xml b/standalone-metastore/pom.xml
index da23c47131c..be054c48669 100644
--- a/standalone-metastore/pom.xml
+++ b/standalone-metastore/pom.xml
@@ -101,7 +101,7 @@
<junit.platform.version>1.13.3</junit.platform.version>
<libfb303.version>0.9.3</libfb303.version>
<libthrift.version>0.16.0</libthrift.version>
- <log4j2.version>2.25.4</log4j2.version>
+ <log4j2.version>2.26.1</log4j2.version>
<mockito-core.version>5.17.0</mockito-core.version>
<orc.version>2.3.0</orc.version>
<protobuf.version>3.25.5</protobuf.version>
