Skip to content

[Backport 2.13] Bump org.apache.logging.log4j:log4j-bom from 2.25.1 to 2.25.3 in /data-prepper-expression - #6517

Merged
dlvenable merged 1 commit into
2.13from
backport/backport-6379-to-2.13
Feb 16, 2026
Merged

dlvenable merged 1 commit into
2.13from
backport/backport-6379-to-2.13

Conversation

@opensearch-trigger-bot

Copy link
Copy Markdown
Contributor

Backport f71b5b7 from #6379

โ€ฆ6379)

Bumps [org.apache.logging.log4j:log4j-bom](https://github.com/apache/logging-log4j2) from 2.25.1 to 2.25.3.
- [Release notes](https://github.com/apache/logging-log4j2/releases)
- [Changelog](https://github.com/apache/logging-log4j2/blob/2.x/RELEASE-NOTES.adoc)
- [Commits](apache/logging-log4j2@rel/2.25.1...rel/2.25.3)

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-bom
  dependency-version: 2.25.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit f71b5b7)
@dlvenable
dlvenable merged commit b93361a into 2.13 Feb 16, 2026
46 of 49 checks passed
@dlvenable

Copy link
Copy Markdown
Member

Fixes CVE-2025-68161

@dlvenable dlvenable added this to the v.2.13.1 milestone Feb 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant