[FLINK-36179] Bump log4j version

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: kubernetes-operator-1.10.0
• Fix Version/s: kubernetes-operator-1.10.0
• Component/s: Kubernetes Operator
• Labels: pull-request-available
• Assignee: Siddharth R
• Reporter: Siddharth R
• Created: 29/Aug/24 12:37
• Updated: 02/Sep/24 12:33
• Resolved: 02/Sep/24 12:33

Description

Bumping log4j to the latest version (2.23.1) - this will remediate a lot of vulnerabilities in dependant packages.

Package details:

1. https://mvnrepository.com/artifact/org.apache.logging.log4j/log4j-1.2-api/2.23.1
2. https://mvnrepository.com/artifact/org.apache.logging.log4j/log4j-slf4j-impl/2.23.1
3. https://mvnrepository.com/artifact/org.apache.logging.log4j/log4j-api/2.23.1
4. https://mvnrepository.com/artifact/org.apache.logging.log4j/log4j-core/2.23.1

Release notes:

https://logging.apache.org/log4j/2.x/release-notes.html

 

Lot of bug fixes has been done in the newer versions and I don't see any breaking changes as such.

 

Issue Links

• links to: GitHub Pull Request #877