david radley created FLINK-37810: ------------------------------------ Summary: update log4j to 2.24.3 to fix critical vulnerabilities Key: FLINK-37810 URL: https://issues.apache.org/jira/browse/FLINK-37810 Project: Flink Issue Type: Technical Debt Reporter: david radley
flink Master and v2 are at 2.24.1 but there are 2 critical issues at that level. See [2.24.3 release notes |[https://logging.apache.org/log4j/2.x/release-notes.html#release-notes-2-24-3]] for details. Update log4j to 2.24.3 to resolve those issues. -- This message was sent by Atlassian Jira (v8.20.10#820010)