This is an automated email from the ASF dual-hosted git repository.

imaxon pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/asterixdb.git

commit 627a10668c5bfef86d27a6a6d5ea7341555daf0a
Author: Michael Blow <[email protected]>
AuthorDate: Sat Feb 21 12:21:36 2026 -0500

    [NO ISSUE][MISC] Update Log4j to 2.25.3 for CVE
    
    Ext-ref: MB-70643
    Change-Id: I7446e4e53684bc54bd41ce96ef1d866ad4db67f8
    Reviewed-on: https://asterix-gerrit.ics.uci.edu/c/asterixdb/+/20925
    Reviewed-by: Michael Blow <[email protected]>
    Tested-by: Michael Blow <[email protected]>
    Reviewed-by: Ali Alsuliman <[email protected]>
---
 asterixdb/pom.xml         | 2 +-
 hyracks-fullstack/pom.xml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/asterixdb/pom.xml b/asterixdb/pom.xml
index 96a831e070..a661f161b9 100644
--- a/asterixdb/pom.xml
+++ b/asterixdb/pom.xml
@@ -87,7 +87,7 @@
     <hyracks.version>0.3.8.3-SNAPSHOT</hyracks.version>
     <hadoop.version>3.4.1</hadoop.version>
     <jacoco.version>0.7.6.201602180812</jacoco.version>
-    <log4j.version>2.22.1</log4j.version>
+    <log4j.version>2.25.3</log4j.version>
     <awsjavasdk.version>2.29.27</awsjavasdk.version>
     <parquet.version>1.15.2</parquet.version> <!-- NOTICE: please update 
transitives from parquet below on any change -->
     <hadoop-awsjavasdk.version>1.12.779</hadoop-awsjavasdk.version>
diff --git a/hyracks-fullstack/pom.xml b/hyracks-fullstack/pom.xml
index a8ea92cdb4..459fc90b59 100644
--- a/hyracks-fullstack/pom.xml
+++ b/hyracks-fullstack/pom.xml
@@ -71,7 +71,7 @@
     <!-- Versions under dependencymanagement or used in many projects via 
properties -->
     <hadoop.version>3.4.1</hadoop.version>
     <jacoco.version>0.7.6.201602180812</jacoco.version>
-    <log4j.version>2.22.1</log4j.version>
+    <log4j.version>2.25.3</log4j.version>
     <snappy.version>1.1.10.5</snappy.version>
     <jackson.version>2.19.2</jackson.version>
     <jackson-databind.version>${jackson.version}</jackson-databind.version>

Reply via email to