This is an automated email from the ASF dual-hosted git repository.
vy pushed a commit to branch 2.x
in repository https://gitbox.apache.org/repos/asf/logging-log4j2.git
The following commit(s) were added to refs/heads/2.x by this push:
new 5ee789082f Merge `rel/2.25.3` to `2.x` (#4004)
5ee789082f is described below
commit 5ee789082f1d07b6ccad81c4470b26494516a86b
Author: Volkan Yazıcı <[email protected]>
AuthorDate: Tue Dec 16 21:53:24 2025 +0100
Merge `rel/2.25.3` to `2.x` (#4004)
---
.../org/apache/log4j/helpers/package-info.java | 2 +-
.../main/java/org/apache/log4j/package-info.java | 2 +-
.../java/org/apache/log4j/xml/package-info.java | 2 +-
.../logging/log4j/test/junit/package-info.java | 2 +-
.../apache/logging/log4j/test/package-info.java | 2 +-
.../apache/logging/log4j/simple/package-info.java | 2 +-
.../apache/logging/log4j/status/package-info.java | 2 +-
.../apache/logging/log4j/util/package-info.java | 2 +-
.../log4j/appserver/jetty/package-info.java | 2 +-
.../log4j/appserver/tomcat/package-info.java | 2 +-
.../core/test/appender/db/jdbc/package-info.java | 2 +-
.../log4j/core/test/junit/package-info.java | 2 +-
.../log4j/core/test/net/mock/package-info.java | 2 +-
.../log4j/core/test/net/ssl/package-info.java | 2 +-
.../logging/log4j/core/test/smtp/package-info.java | 2 +-
.../log4j/core/appender/db/jdbc/package-info.java | 2 +-
.../core/config/builder/impl/package-info.java | 2 +-
.../core/config/plugins/convert/package-info.java | 2 +-
.../core/config/plugins/util/package-info.java | 2 +-
.../log4j/core/config/status/package-info.java | 2 +-
.../logging/log4j/core/filter/package-info.java | 2 +-
.../logging/log4j/core/jmx/package-info.java | 2 +-
.../logging/log4j/core/net/package-info.java | 2 +-
.../logging/log4j/core/net/ssl/package-info.java | 2 +-
.../apache/logging/log4j/core/package-info.java | 2 +-
.../logging/log4j/core/tools/package-info.java | 2 +-
.../logging/log4j/core/util/package-info.java | 2 +-
.../org/apache/logging/log4j/jul/package-info.java | 2 +-
.../layout/template/json/util/package-info.java | 2 +-
pom.xml | 2 +-
src/changelog/2.25.3/.release-notes.adoc.ftl | 27 ++++++++++++++++++++++
src/changelog/2.25.3/.release.xml | 21 +++++++++++++++++
src/changelog/2.25.3/3871_graalvm_binary_name.xml | 13 +++++++++++
...35_optimize_DefaultThreadContextMap_getCopy.xml | 13 +++++++++++
.../3947_fix_SslSocketManager_null_keystore.xml | 13 +++++++++++
.../2.25.3/3985_remove_spotbugs_annotations.xml | 13 +++++++++++
.../4002_fix_SslSocketAppender_verifyHostName.xml | 12 ++++++++++
37 files changed, 142 insertions(+), 30 deletions(-)
diff --git
a/log4j-1.2-api/src/main/java/org/apache/log4j/helpers/package-info.java
b/log4j-1.2-api/src/main/java/org/apache/log4j/helpers/package-info.java
index a6e54fdb7b..35c8b8868b 100644
--- a/log4j-1.2-api/src/main/java/org/apache/log4j/helpers/package-info.java
+++ b/log4j-1.2-api/src/main/java/org/apache/log4j/helpers/package-info.java
@@ -18,7 +18,7 @@
* Log4j 1.x compatibility layer.
*/
@Export
-@Version("2.26.0")
+@Version("2.25.3")
package org.apache.log4j.helpers;
import org.osgi.annotation.bundle.Export;
diff --git a/log4j-1.2-api/src/main/java/org/apache/log4j/package-info.java
b/log4j-1.2-api/src/main/java/org/apache/log4j/package-info.java
index e8b2323477..aa69397fed 100644
--- a/log4j-1.2-api/src/main/java/org/apache/log4j/package-info.java
+++ b/log4j-1.2-api/src/main/java/org/apache/log4j/package-info.java
@@ -18,7 +18,7 @@
* Log4j 1.x compatibility layer.
*/
@Export
-@Version("2.26.0")
+@Version("2.25.3")
package org.apache.log4j;
import org.osgi.annotation.bundle.Export;
diff --git a/log4j-1.2-api/src/main/java/org/apache/log4j/xml/package-info.java
b/log4j-1.2-api/src/main/java/org/apache/log4j/xml/package-info.java
index 947cfd6965..f420386fa0 100644
--- a/log4j-1.2-api/src/main/java/org/apache/log4j/xml/package-info.java
+++ b/log4j-1.2-api/src/main/java/org/apache/log4j/xml/package-info.java
@@ -18,7 +18,7 @@
* Log4j 1.x compatibility layer.
*/
@Export
-@Version("2.26.0")
+@Version("2.25.3")
package org.apache.log4j.xml;
import org.osgi.annotation.bundle.Export;
diff --git
a/log4j-api-test/src/main/java/org/apache/logging/log4j/test/junit/package-info.java
b/log4j-api-test/src/main/java/org/apache/logging/log4j/test/junit/package-info.java
index ca324bf73a..f048e320fe 100644
---
a/log4j-api-test/src/main/java/org/apache/logging/log4j/test/junit/package-info.java
+++
b/log4j-api-test/src/main/java/org/apache/logging/log4j/test/junit/package-info.java
@@ -15,7 +15,7 @@
* limitations under the license.
*/
@Export
-@Version("2.26.0")
+@Version("2.25.3")
package org.apache.logging.log4j.test.junit;
import org.osgi.annotation.bundle.Export;
diff --git
a/log4j-api-test/src/main/java/org/apache/logging/log4j/test/package-info.java
b/log4j-api-test/src/main/java/org/apache/logging/log4j/test/package-info.java
index 36413766c5..a867f216a5 100644
---
a/log4j-api-test/src/main/java/org/apache/logging/log4j/test/package-info.java
+++
b/log4j-api-test/src/main/java/org/apache/logging/log4j/test/package-info.java
@@ -15,7 +15,7 @@
* limitations under the license.
*/
@Export
-@Version("2.26.0")
+@Version("2.25.3")
package org.apache.logging.log4j.test;
import org.osgi.annotation.bundle.Export;
diff --git
a/log4j-api/src/main/java/org/apache/logging/log4j/simple/package-info.java
b/log4j-api/src/main/java/org/apache/logging/log4j/simple/package-info.java
index 3e5667856f..754367330d 100644
--- a/log4j-api/src/main/java/org/apache/logging/log4j/simple/package-info.java
+++ b/log4j-api/src/main/java/org/apache/logging/log4j/simple/package-info.java
@@ -20,7 +20,7 @@
* Providers are able to be loaded at runtime.
*/
@Export
-@Version("2.26.0")
+@Version("2.25.3")
package org.apache.logging.log4j.simple;
import org.osgi.annotation.bundle.Export;
diff --git
a/log4j-api/src/main/java/org/apache/logging/log4j/status/package-info.java
b/log4j-api/src/main/java/org/apache/logging/log4j/status/package-info.java
index 25274a7b23..d4ca3a5841 100644
--- a/log4j-api/src/main/java/org/apache/logging/log4j/status/package-info.java
+++ b/log4j-api/src/main/java/org/apache/logging/log4j/status/package-info.java
@@ -19,7 +19,7 @@
* used by applications reporting on the status of the logging system
*/
@Export
-@Version("2.26.0")
+@Version("2.25.3")
package org.apache.logging.log4j.status;
import org.osgi.annotation.bundle.Export;
diff --git
a/log4j-api/src/main/java/org/apache/logging/log4j/util/package-info.java
b/log4j-api/src/main/java/org/apache/logging/log4j/util/package-info.java
index f20d42965c..966b554753 100644
--- a/log4j-api/src/main/java/org/apache/logging/log4j/util/package-info.java
+++ b/log4j-api/src/main/java/org/apache/logging/log4j/util/package-info.java
@@ -20,7 +20,7 @@
* There are no guarantees for binary or logical compatibility in this package.
*/
@Export
-@Version("2.26.0")
+@Version("2.25.3")
package org.apache.logging.log4j.util;
import org.osgi.annotation.bundle.Export;
diff --git
a/log4j-appserver/src/main/java/org/apache/logging/log4j/appserver/jetty/package-info.java
b/log4j-appserver/src/main/java/org/apache/logging/log4j/appserver/jetty/package-info.java
index d4e606ba46..f9dfbbd5aa 100644
---
a/log4j-appserver/src/main/java/org/apache/logging/log4j/appserver/jetty/package-info.java
+++
b/log4j-appserver/src/main/java/org/apache/logging/log4j/appserver/jetty/package-info.java
@@ -19,7 +19,7 @@
*/
@Open
@Export
-@Version("2.26.0")
+@Version("2.25.3")
package org.apache.logging.log4j.appserver.jetty;
import aQute.bnd.annotation.jpms.Open;
diff --git
a/log4j-appserver/src/main/java/org/apache/logging/log4j/appserver/tomcat/package-info.java
b/log4j-appserver/src/main/java/org/apache/logging/log4j/appserver/tomcat/package-info.java
index 0a84c1f708..4f5c3c2d9d 100644
---
a/log4j-appserver/src/main/java/org/apache/logging/log4j/appserver/tomcat/package-info.java
+++
b/log4j-appserver/src/main/java/org/apache/logging/log4j/appserver/tomcat/package-info.java
@@ -18,7 +18,7 @@
* Log4j integration with Apache Tomcat 8.5 or greater.
*/
@Export
-@Version("2.26.0")
+@Version("2.25.3")
package org.apache.logging.log4j.appserver.tomcat;
import org.osgi.annotation.bundle.Export;
diff --git
a/log4j-core-test/src/main/java/org/apache/logging/log4j/core/test/appender/db/jdbc/package-info.java
b/log4j-core-test/src/main/java/org/apache/logging/log4j/core/test/appender/db/jdbc/package-info.java
index b49536fd02..0849ce859b 100644
---
a/log4j-core-test/src/main/java/org/apache/logging/log4j/core/test/appender/db/jdbc/package-info.java
+++
b/log4j-core-test/src/main/java/org/apache/logging/log4j/core/test/appender/db/jdbc/package-info.java
@@ -15,7 +15,7 @@
* limitations under the license.
*/
@Export
-@Version("2.26.0")
+@Version("2.25.3")
package org.apache.logging.log4j.core.test.appender.db.jdbc;
import org.osgi.annotation.bundle.Export;
diff --git
a/log4j-core-test/src/main/java/org/apache/logging/log4j/core/test/junit/package-info.java
b/log4j-core-test/src/main/java/org/apache/logging/log4j/core/test/junit/package-info.java
index a92fa4c345..767f0667fa 100644
---
a/log4j-core-test/src/main/java/org/apache/logging/log4j/core/test/junit/package-info.java
+++
b/log4j-core-test/src/main/java/org/apache/logging/log4j/core/test/junit/package-info.java
@@ -20,7 +20,7 @@
* @see org.junit.rules.TestRule
*/
@Export
-@Version("2.26.0")
+@Version("2.25.3")
package org.apache.logging.log4j.core.test.junit;
import org.osgi.annotation.bundle.Export;
diff --git
a/log4j-core-test/src/main/java/org/apache/logging/log4j/core/test/net/mock/package-info.java
b/log4j-core-test/src/main/java/org/apache/logging/log4j/core/test/net/mock/package-info.java
index a7501fb3cd..a6e6473acc 100644
---
a/log4j-core-test/src/main/java/org/apache/logging/log4j/core/test/net/mock/package-info.java
+++
b/log4j-core-test/src/main/java/org/apache/logging/log4j/core/test/net/mock/package-info.java
@@ -15,7 +15,7 @@
* limitations under the license.
*/
@Export
-@Version("2.26.0")
+@Version("2.25.3")
package org.apache.logging.log4j.core.test.net.mock;
import org.osgi.annotation.bundle.Export;
diff --git
a/log4j-core-test/src/main/java/org/apache/logging/log4j/core/test/net/ssl/package-info.java
b/log4j-core-test/src/main/java/org/apache/logging/log4j/core/test/net/ssl/package-info.java
index 734cd0dc60..8bb578486b 100644
---
a/log4j-core-test/src/main/java/org/apache/logging/log4j/core/test/net/ssl/package-info.java
+++
b/log4j-core-test/src/main/java/org/apache/logging/log4j/core/test/net/ssl/package-info.java
@@ -15,7 +15,7 @@
* limitations under the license.
*/
@Export
-@Version("2.26.0")
+@Version("2.25.3")
package org.apache.logging.log4j.core.test.net.ssl;
import org.osgi.annotation.bundle.Export;
diff --git
a/log4j-core-test/src/main/java/org/apache/logging/log4j/core/test/smtp/package-info.java
b/log4j-core-test/src/main/java/org/apache/logging/log4j/core/test/smtp/package-info.java
index 8b7122660a..6df4ca65d0 100644
---
a/log4j-core-test/src/main/java/org/apache/logging/log4j/core/test/smtp/package-info.java
+++
b/log4j-core-test/src/main/java/org/apache/logging/log4j/core/test/smtp/package-info.java
@@ -15,7 +15,7 @@
* limitations under the license.
*/
@Export
-@Version("2.26.0")
+@Version("2.25.3")
package org.apache.logging.log4j.core.test.smtp;
import org.osgi.annotation.bundle.Export;
diff --git
a/log4j-core/src/main/java/org/apache/logging/log4j/core/appender/db/jdbc/package-info.java
b/log4j-core/src/main/java/org/apache/logging/log4j/core/appender/db/jdbc/package-info.java
index 02ea4343fc..cd8718d151 100644
---
a/log4j-core/src/main/java/org/apache/logging/log4j/core/appender/db/jdbc/package-info.java
+++
b/log4j-core/src/main/java/org/apache/logging/log4j/core/appender/db/jdbc/package-info.java
@@ -19,7 +19,7 @@
* a JDBC driver on your classpath for the database you wish to log to.
*/
@Export
-@Version("2.26.0")
+@Version("2.25.3")
package org.apache.logging.log4j.core.appender.db.jdbc;
import org.osgi.annotation.bundle.Export;
diff --git
a/log4j-core/src/main/java/org/apache/logging/log4j/core/config/builder/impl/package-info.java
b/log4j-core/src/main/java/org/apache/logging/log4j/core/config/builder/impl/package-info.java
index c7feac338f..c020452661 100644
---
a/log4j-core/src/main/java/org/apache/logging/log4j/core/config/builder/impl/package-info.java
+++
b/log4j-core/src/main/java/org/apache/logging/log4j/core/config/builder/impl/package-info.java
@@ -20,7 +20,7 @@
* @since 2.4
*/
@Export
-@Version("2.26.0")
+@Version("2.25.3")
package org.apache.logging.log4j.core.config.builder.impl;
import org.osgi.annotation.bundle.Export;
diff --git
a/log4j-core/src/main/java/org/apache/logging/log4j/core/config/plugins/convert/package-info.java
b/log4j-core/src/main/java/org/apache/logging/log4j/core/config/plugins/convert/package-info.java
index e7d16d7f33..5ee09dce3c 100644
---
a/log4j-core/src/main/java/org/apache/logging/log4j/core/config/plugins/convert/package-info.java
+++
b/log4j-core/src/main/java/org/apache/logging/log4j/core/config/plugins/convert/package-info.java
@@ -20,7 +20,7 @@
* attributes in plugin factory methods.
*/
@Export
-@Version("2.26.0")
+@Version("2.25.3")
package org.apache.logging.log4j.core.config.plugins.convert;
import org.osgi.annotation.bundle.Export;
diff --git
a/log4j-core/src/main/java/org/apache/logging/log4j/core/config/plugins/util/package-info.java
b/log4j-core/src/main/java/org/apache/logging/log4j/core/config/plugins/util/package-info.java
index e395672615..a3fd8246e3 100644
---
a/log4j-core/src/main/java/org/apache/logging/log4j/core/config/plugins/util/package-info.java
+++
b/log4j-core/src/main/java/org/apache/logging/log4j/core/config/plugins/util/package-info.java
@@ -19,7 +19,7 @@
* Utility and manager classes for Log4j 2 plugins.
*/
@Export
-@Version("2.26.0")
+@Version("2.25.3")
package org.apache.logging.log4j.core.config.plugins.util;
import org.osgi.annotation.bundle.Export;
diff --git
a/log4j-core/src/main/java/org/apache/logging/log4j/core/config/status/package-info.java
b/log4j-core/src/main/java/org/apache/logging/log4j/core/config/status/package-info.java
index 703f79aa00..5631c737d8 100644
---
a/log4j-core/src/main/java/org/apache/logging/log4j/core/config/status/package-info.java
+++
b/log4j-core/src/main/java/org/apache/logging/log4j/core/config/status/package-info.java
@@ -19,7 +19,7 @@
* Configuration classes for the {@link
org.apache.logging.log4j.status.StatusLogger} API.
*/
@Export
-@Version("2.26.0")
+@Version("2.25.3")
package org.apache.logging.log4j.core.config.status;
import org.osgi.annotation.bundle.Export;
diff --git
a/log4j-core/src/main/java/org/apache/logging/log4j/core/filter/package-info.java
b/log4j-core/src/main/java/org/apache/logging/log4j/core/filter/package-info.java
index f02feaa580..38173ef473 100644
---
a/log4j-core/src/main/java/org/apache/logging/log4j/core/filter/package-info.java
+++
b/log4j-core/src/main/java/org/apache/logging/log4j/core/filter/package-info.java
@@ -22,7 +22,7 @@
* {@link org.apache.logging.log4j.core.Filter#ELEMENT_TYPE filter}.
*/
@Export
-@Version("2.26.0")
+@Version("2.25.3")
package org.apache.logging.log4j.core.filter;
import org.osgi.annotation.bundle.Export;
diff --git
a/log4j-core/src/main/java/org/apache/logging/log4j/core/jmx/package-info.java
b/log4j-core/src/main/java/org/apache/logging/log4j/core/jmx/package-info.java
index dd13c9482a..ec051e31b3 100644
---
a/log4j-core/src/main/java/org/apache/logging/log4j/core/jmx/package-info.java
+++
b/log4j-core/src/main/java/org/apache/logging/log4j/core/jmx/package-info.java
@@ -18,7 +18,7 @@
* Log4j 2 JMX support.
*/
@Export
-@Version("2.26.0")
+@Version("2.25.3")
package org.apache.logging.log4j.core.jmx;
import org.osgi.annotation.bundle.Export;
diff --git
a/log4j-core/src/main/java/org/apache/logging/log4j/core/net/package-info.java
b/log4j-core/src/main/java/org/apache/logging/log4j/core/net/package-info.java
index 089d4b3f26..1793a9165f 100644
---
a/log4j-core/src/main/java/org/apache/logging/log4j/core/net/package-info.java
+++
b/log4j-core/src/main/java/org/apache/logging/log4j/core/net/package-info.java
@@ -25,7 +25,7 @@
* </ul>
*/
@Export
-@Version("2.26.0")
+@Version("2.25.3")
package org.apache.logging.log4j.core.net;
import org.osgi.annotation.bundle.Export;
diff --git
a/log4j-core/src/main/java/org/apache/logging/log4j/core/net/ssl/package-info.java
b/log4j-core/src/main/java/org/apache/logging/log4j/core/net/ssl/package-info.java
index 748173b9a3..ea6e94723a 100644
---
a/log4j-core/src/main/java/org/apache/logging/log4j/core/net/ssl/package-info.java
+++
b/log4j-core/src/main/java/org/apache/logging/log4j/core/net/ssl/package-info.java
@@ -18,7 +18,7 @@
* Log4j 2 SSL support
*/
@Export
-@Version("2.26.0")
+@Version("2.25.3")
package org.apache.logging.log4j.core.net.ssl;
import org.osgi.annotation.bundle.Export;
diff --git
a/log4j-core/src/main/java/org/apache/logging/log4j/core/package-info.java
b/log4j-core/src/main/java/org/apache/logging/log4j/core/package-info.java
index 45bc926c52..c09868a666 100644
--- a/log4j-core/src/main/java/org/apache/logging/log4j/core/package-info.java
+++ b/log4j-core/src/main/java/org/apache/logging/log4j/core/package-info.java
@@ -18,7 +18,7 @@
* Implementation of Log4j 2.
*/
@Export
-@Version("2.26.0")
+@Version("2.25.3")
package org.apache.logging.log4j.core;
import org.osgi.annotation.bundle.Export;
diff --git
a/log4j-core/src/main/java/org/apache/logging/log4j/core/tools/package-info.java
b/log4j-core/src/main/java/org/apache/logging/log4j/core/tools/package-info.java
index 38f664c29c..b75426e2ec 100644
---
a/log4j-core/src/main/java/org/apache/logging/log4j/core/tools/package-info.java
+++
b/log4j-core/src/main/java/org/apache/logging/log4j/core/tools/package-info.java
@@ -18,7 +18,7 @@
* Log4j 2 command line tools.
*/
@Export
-@Version("2.26.0")
+@Version("2.25.3")
package org.apache.logging.log4j.core.tools;
import org.osgi.annotation.bundle.Export;
diff --git
a/log4j-core/src/main/java/org/apache/logging/log4j/core/util/package-info.java
b/log4j-core/src/main/java/org/apache/logging/log4j/core/util/package-info.java
index b9efa51956..e4ac85f5eb 100644
---
a/log4j-core/src/main/java/org/apache/logging/log4j/core/util/package-info.java
+++
b/log4j-core/src/main/java/org/apache/logging/log4j/core/util/package-info.java
@@ -18,7 +18,7 @@
* Log4j 2 helper classes.
*/
@Export
-@Version("2.26.0")
+@Version("2.25.3")
package org.apache.logging.log4j.core.util;
import org.osgi.annotation.bundle.Export;
diff --git
a/log4j-jul/src/main/java/org/apache/logging/log4j/jul/package-info.java
b/log4j-jul/src/main/java/org/apache/logging/log4j/jul/package-info.java
index d7c5b41f89..3aa6888c9b 100644
--- a/log4j-jul/src/main/java/org/apache/logging/log4j/jul/package-info.java
+++ b/log4j-jul/src/main/java/org/apache/logging/log4j/jul/package-info.java
@@ -15,7 +15,7 @@
* limitations under the license.
*/
@Export
-@Version("2.26.0")
+@Version("2.25.3")
package org.apache.logging.log4j.jul;
import org.osgi.annotation.bundle.Export;
diff --git
a/log4j-layout-template-json/src/main/java/org/apache/logging/log4j/layout/template/json/util/package-info.java
b/log4j-layout-template-json/src/main/java/org/apache/logging/log4j/layout/template/json/util/package-info.java
index a806ff5105..87322eee38 100644
---
a/log4j-layout-template-json/src/main/java/org/apache/logging/log4j/layout/template/json/util/package-info.java
+++
b/log4j-layout-template-json/src/main/java/org/apache/logging/log4j/layout/template/json/util/package-info.java
@@ -15,7 +15,7 @@
* limitations under the License.
*/
@Export
-@Version("2.26.0")
+@Version("2.25.3")
@Open("org.apache.logging.log4j.core")
package org.apache.logging.log4j.layout.template.json.util;
diff --git a/pom.xml b/pom.xml
index b3c1385c7a..c4d4af8b9a 100644
--- a/pom.xml
+++ b/pom.xml
@@ -325,7 +325,7 @@
2. This value is employed in various places while creating the
distribution
To mitigate these, we define a *dummy* value here and let the CI
replace it during a release.
Hence, *DO NOT MANUALLY EDIT THIS VALUE*! -->
-
<project.build.outputTimestamp>2025-09-18T18:02:17Z</project.build.outputTimestamp>
+
<project.build.outputTimestamp>2025-12-15T12:02:19Z</project.build.outputTimestamp>
<!-- ========================
Site-specific properties
diff --git a/src/changelog/2.25.3/.release-notes.adoc.ftl
b/src/changelog/2.25.3/.release-notes.adoc.ftl
new file mode 100644
index 0000000000..23cd95914a
--- /dev/null
+++ b/src/changelog/2.25.3/.release-notes.adoc.ftl
@@ -0,0 +1,27 @@
+////
+ Licensed to the Apache Software Foundation (ASF) under one or more
+ contributor license agreements. See the NOTICE file distributed with
+ this work for additional information regarding copyright ownership.
+ The ASF licenses this file to You under the Apache License, Version 2.0
+ (the "License"); you may not use this file except in compliance with
+ the License. You may obtain a copy of the License at
+
+ https://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+////
+
+[${'#release-notes-' + release.version?replace("[^a-zA-Z0-9]", "-", "r")}]
+== ${release.version}
+
+<#if release.date?has_content>Release date:: ${release.date}</#if>
+
+This patch release addresses issues detailed in the changelog below.
+In particular, it includes an important fix for
xref:manual/appenders/network.adoc#SslConfiguration-attr-verifyHostName[the
host name verification in SSL/TLS configuration].
+This is used by xref:manual/appenders/network.adoc#SocketAppender[Socket
Appender].
+
+<#include "../.changelog.adoc.ftl">
diff --git a/src/changelog/2.25.3/.release.xml
b/src/changelog/2.25.3/.release.xml
new file mode 100644
index 0000000000..983946a176
--- /dev/null
+++ b/src/changelog/2.25.3/.release.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+ ~ Licensed to the Apache Software Foundation (ASF) under one or more
+ ~ contributor license agreements. See the NOTICE file distributed with
+ ~ this work for additional information regarding copyright ownership.
+ ~ The ASF licenses this file to you under the Apache License, Version 2.0
+ ~ (the "License"); you may not use this file except in compliance with
+ ~ the License. You may obtain a copy of the License at
+ ~
+ ~ http://www.apache.org/licenses/LICENSE-2.0
+ ~
+ ~ Unless required by applicable law or agreed to in writing, software
+ ~ distributed under the License is distributed on an "AS IS" BASIS,
+ ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ ~ See the License for the specific language governing permissions and
+ ~ limitations under the License.
+ -->
+<release xmlns="https://logging.apache.org/xml/ns";
+ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
+ xsi:schemaLocation="https://logging.apache.org/xml/ns
https://logging.apache.org/xml/ns/log4j-changelog-0.xsd";
+ date="2025-12-15" version="2.25.3"/>
diff --git a/src/changelog/2.25.3/3871_graalvm_binary_name.xml
b/src/changelog/2.25.3/3871_graalvm_binary_name.xml
new file mode 100644
index 0000000000..e188de9b30
--- /dev/null
+++ b/src/changelog/2.25.3/3871_graalvm_binary_name.xml
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns="https://logging.apache.org/xml/ns";
+ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
+ xsi:schemaLocation="
+ https://logging.apache.org/xml/ns
+ https://logging.apache.org/xml/ns/log4j-changelog-0.xsd";
+ type="fixed">
+ <issue id="3871"
link="https://github.com/apache/logging-log4j2/issues/3871"/>
+ <issue id="3996"
link="https://github.com/apache/logging-log4j2/pull/3996"/>
+ <description format="asciidoc">
+ Fix GraalVM metadata for nested classes to use binary names instead of
canonical names
+ </description>
+</entry>
diff --git
a/src/changelog/2.25.3/3935_optimize_DefaultThreadContextMap_getCopy.xml
b/src/changelog/2.25.3/3935_optimize_DefaultThreadContextMap_getCopy.xml
new file mode 100644
index 0000000000..35e1cf8b44
--- /dev/null
+++ b/src/changelog/2.25.3/3935_optimize_DefaultThreadContextMap_getCopy.xml
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns="https://logging.apache.org/xml/ns";
+ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
+ xsi:schemaLocation="
+ https://logging.apache.org/xml/ns
+ https://logging.apache.org/xml/ns/log4j-changelog-0.xsd";
+ type="changed">
+ <issue id="3935"
link="https://github.com/apache/logging-log4j2/issues/3935"/>
+ <issue id="3939"
link="https://github.com/apache/logging-log4j2/pull/3939"/>
+ <description format="asciidoc">
+ Optimize `DefaultThreadContextMap.getCopy()` performance by avoiding
megamorphic calls in `HashMap` constructor
+ </description>
+</entry>
\ No newline at end of file
diff --git a/src/changelog/2.25.3/3947_fix_SslSocketManager_null_keystore.xml
b/src/changelog/2.25.3/3947_fix_SslSocketManager_null_keystore.xml
new file mode 100644
index 0000000000..ff6efe8256
--- /dev/null
+++ b/src/changelog/2.25.3/3947_fix_SslSocketManager_null_keystore.xml
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns="https://logging.apache.org/xml/ns";
+ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
+ xsi:schemaLocation="
+ https://logging.apache.org/xml/ns
+ https://logging.apache.org/xml/ns/log4j-changelog-0.xsd";
+ type="fixed">
+ <issue id="3947"
link="https://github.com/apache/logging-log4j2/issues/3947"/>
+ <issue id="3953"
link="https://github.com/apache/logging-log4j2/pull/3953"/>
+ <description format="asciidoc">
+ Fix failures caused by null `SslConfiguration`
+ </description>
+</entry>
diff --git a/src/changelog/2.25.3/3985_remove_spotbugs_annotations.xml
b/src/changelog/2.25.3/3985_remove_spotbugs_annotations.xml
new file mode 100644
index 0000000000..a2c7b3b8b2
--- /dev/null
+++ b/src/changelog/2.25.3/3985_remove_spotbugs_annotations.xml
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns="https://logging.apache.org/xml/ns";
+ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
+ xsi:schemaLocation="
+ https://logging.apache.org/xml/ns
+ https://logging.apache.org/xml/ns/log4j-changelog-0.xsd";
+ type="removed">
+ <issue id="3984"
link="https://github.com/apache/logging-log4j2/issues/3984"/>
+ <issue id="3985"
link="https://github.com/apache/logging-log4j2/pull/3985"/>
+ <description format="asciidoc">
+ Remove the `com.github.spotbugs:spotbugs-annotations` dependency
+ </description>
+</entry>
diff --git a/src/changelog/2.25.3/4002_fix_SslSocketAppender_verifyHostName.xml
b/src/changelog/2.25.3/4002_fix_SslSocketAppender_verifyHostName.xml
new file mode 100644
index 0000000000..a2d2ff1fd3
--- /dev/null
+++ b/src/changelog/2.25.3/4002_fix_SslSocketAppender_verifyHostName.xml
@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns="https://logging.apache.org/xml/ns";
+ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
+ xsi:schemaLocation="
+ https://logging.apache.org/xml/ns
+ https://logging.apache.org/xml/ns/log4j-changelog-0.xsd";
+ type="fixed">
+ <issue id="4002" link="https://github.com/apache/logging-log4j2/pull/4002"/>
+ <description format="asciidoc">
+ Fix incorrect handling of
xref:manual/appenders/network.adoc#SslConfiguration-attr-verifyHostName[the
host name verification in SSL/TLS configuration], which is used by
xref:manual/appenders/network.adoc#SocketAppender[Socket Appender] when SSL/TLS
is enabled
+ </description>
+</entry>
