>From Michael Blow <[email protected]>:

Michael Blow has submitted this change. ( 
https://asterix-gerrit.ics.uci.edu/c/asterixdb/+/20925?usp=email )

 (

1 is the latest approved patch-set.
No files were changed between the latest approved patch-set and the submitted 
one.
 )Change subject: [NO ISSUE][MISC] Update Log4j to 2.25.3 for CVE
......................................................................

[NO ISSUE][MISC] Update Log4j to 2.25.3 for CVE

Ext-ref: MB-70643
Change-Id: I7446e4e53684bc54bd41ce96ef1d866ad4db67f8
Reviewed-on: https://asterix-gerrit.ics.uci.edu/c/asterixdb/+/20925
Reviewed-by: Michael Blow <[email protected]>
Tested-by: Michael Blow <[email protected]>
Reviewed-by: Ali Alsuliman <[email protected]>
---
M asterixdb/pom.xml
M hyracks-fullstack/pom.xml
2 files changed, 2 insertions(+), 2 deletions(-)

Approvals:
  Michael Blow: Looks good to me, but someone else must approve; Verified
  Ali Alsuliman: Looks good to me, approved




diff --git a/asterixdb/pom.xml b/asterixdb/pom.xml
index 96a831e..a661f16 100644
--- a/asterixdb/pom.xml
+++ b/asterixdb/pom.xml
@@ -87,7 +87,7 @@
     <hyracks.version>0.3.8.3-SNAPSHOT</hyracks.version>
     <hadoop.version>3.4.1</hadoop.version>
     <jacoco.version>0.7.6.201602180812</jacoco.version>
-    <log4j.version>2.22.1</log4j.version>
+    <log4j.version>2.25.3</log4j.version>
     <awsjavasdk.version>2.29.27</awsjavasdk.version>
     <parquet.version>1.15.2</parquet.version> <!-- NOTICE: please update 
transitives from parquet below on any change -->
     <hadoop-awsjavasdk.version>1.12.779</hadoop-awsjavasdk.version>
diff --git a/hyracks-fullstack/pom.xml b/hyracks-fullstack/pom.xml
index a8ea92c..459fc90 100644
--- a/hyracks-fullstack/pom.xml
+++ b/hyracks-fullstack/pom.xml
@@ -71,7 +71,7 @@
     <!-- Versions under dependencymanagement or used in many projects via 
properties -->
     <hadoop.version>3.4.1</hadoop.version>
     <jacoco.version>0.7.6.201602180812</jacoco.version>
-    <log4j.version>2.22.1</log4j.version>
+    <log4j.version>2.25.3</log4j.version>
     <snappy.version>1.1.10.5</snappy.version>
     <jackson.version>2.19.2</jackson.version>
     <jackson-databind.version>${jackson.version}</jackson-databind.version>

--
To view, visit https://asterix-gerrit.ics.uci.edu/c/asterixdb/+/20925?usp=email
To unsubscribe, or for help writing mail filters, visit 
https://asterix-gerrit.ics.uci.edu/settings?usp=email

Gerrit-MessageType: merged
Gerrit-Project: asterixdb
Gerrit-Branch: trinity
Gerrit-Change-Id: I7446e4e53684bc54bd41ce96ef1d866ad4db67f8
Gerrit-Change-Number: 20925
Gerrit-PatchSet: 3
Gerrit-Owner: Michael Blow <[email protected]>
Gerrit-Reviewer: Ali Alsuliman <[email protected]>
Gerrit-Reviewer: Anon. E. Moose #1000171
Gerrit-Reviewer: Jenkins <[email protected]>
Gerrit-Reviewer: Michael Blow <[email protected]>

Reply via email to