[
https://issues.apache.org/jira/browse/FLINK-39146?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18141948#comment-18141948
]
Rui Fan edited comment on FLINK-39146 at 11/12/26, 3:32 AM:
------------------------------------------------------------
Fixed:
- 2.2.2: 377060b56e48358ebff665374424a5766175b1f4
- 1.20.6: 5cf2d5e1d15fbce62e2cd8c1131e4733f1191275
was (Author: fanrui):
Fixed:
- 2.2.2: 377060b56e48358ebff665374424a5766175b1f4
> Update log4j to 2.25.3
> ----------------------
>
> Key: FLINK-39146
> URL: https://issues.apache.org/jira/browse/FLINK-39146
> Project: Flink
> Issue Type: Improvement
> Reporter: Cameron
> Assignee: Cameron
> Priority: Major
> Labels: pull-request-available
> Fix For: 2.3.0, 2.2.2
>
>
> log4j-core 2.24.3 contains
> [CVE-2025-68161|https://github.com/advisories/GHSA-vc5p-v9hr-52mj]
> Updating to 2.25.3 resolves the CVE.
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
