[jira] [Updated] (FLINK-36440) Bump log4j from 2.17.1 to 2.23.1

["ASF GitHub Bot (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/FLINK-36440?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

ASF GitHub Bot updated FLINK-36440:
-----------------------------------
    Labels: pull-request-available  (was: )

> Bump log4j from 2.17.1 to 2.23.1
> --------------------------------
>
>                 Key: FLINK-36440
>                 URL: https://issues.apache.org/jira/browse/FLINK-36440
>             Project: Flink
>          Issue Type: Improvement
>            Reporter: Siddharth R
>            Priority: Major
>              Labels: pull-request-available
>
> Bumping *log4j* to the latest version (2.23.1) - this will remediate a lot of vulnerabilities in dependant packages.
> Package details:
>  # [https://mvnrepository.com/artifact/org.apache.logging.log4j/log4j-1.2-api/2.23.1]
>  # [https://mvnrepository.com/artifact/org.apache.logging.log4j/log4j-slf4j-impl/2.23.1]
>  # [https://mvnrepository.com/artifact/org.apache.logging.log4j/log4j-api/2.23.1]
>  # [https://mvnrepository.com/artifact/org.apache.logging.log4j/log4j-core/2.23.1]
> Release notes:
> [https://logging.apache.org/log4j/2.x/release-notes.html]
>  
> Lot of bug fixes has been done in the newer versions and I don't see any breaking changes as such.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)