Upgrade org.apache.logging.log4j:log4j-core and log4j-api libraries i…

…n presto Upgraded org.apache.logging.log4j:log4j-core from 2.17.1 to 2.24.3 Upgraded org.apache.logging.log4j:log4j-api from 2.17.1 to 2.24.3 Fixes almost 25 CVEs.
prestodb · Feb 6, 2025 · 03105ec · 03105ec
1 parent 903520c
commit 03105ec
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/presto-elasticsearch/pom.xml b/presto-elasticsearch/pom.xml
@@ -12,7 +12,7 @@
 
     <properties>
         <air.main.basedir>${project.parent.basedir}</air.main.basedir>
-        <dep.log4j.version>2.17.1</dep.log4j.version>
+        <dep.log4j.version>2.24.3</dep.log4j.version>
         <dep.elasticsearch.version>6.0.0</dep.elasticsearch.version>
     </properties>