You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@flink.apache.org by "Sergey Nuyanzin (Jira)" <ji...@apache.org> on 2026/03/20 17:59:00 UTC

[jira] [Resolved] (FLINK-39146) Update log4j to 2.25.3

     [ https://issues.apache.org/jira/browse/FLINK-39146?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Sergey Nuyanzin resolved FLINK-39146.
-------------------------------------
    Fix Version/s: 2.3.0
       Resolution: Fixed

> Update log4j to 2.25.3
> ----------------------
>
>                 Key: FLINK-39146
>                 URL: https://issues.apache.org/jira/browse/FLINK-39146
>             Project: Flink
>          Issue Type: Improvement
>            Reporter: Cameron
>            Assignee: Cameron
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 2.3.0
>
>
> log4j-core 2.24.3 contains [CVE-2025-68161|https://github.com/advisories/GHSA-vc5p-v9hr-52mj]
> Updating to 2.25.3 resolves the CVE.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)