[
https://issues.apache.org/jira/browse/HBASE-29792?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18054507#comment-18054507
]
Andrew Kyle Purtell edited comment on HBASE-29792 at 1/27/26 5:07 AM:
----------------------------------------------------------------------
I plan to revert this change from branch-2, branch-2.5, and branch-2.6 so we
can proceed with RCs, unless objection.
was (Author: apurtell):
I plan to revert this change from branch-2.5 and branch-2.6 so we can proceed
with RCs, unless objection.
> Bump org.apache.logging.log4j:log4j-core from 2.17.2 to 2.25.3
> --------------------------------------------------------------
>
> Key: HBASE-29792
> URL: https://issues.apache.org/jira/browse/HBASE-29792
> Project: HBase
> Issue Type: Task
> Components: dependabot, dependencies, logging, security
> Reporter: Duo Zhang
> Priority: Major
> Labels: pull-request-available
> Fix For: 2.7.0, 3.0.0-beta-2, 2.6.5, 2.5.14
>
>
> For addressing CVE-2025-68161.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
