From d22ad7fd22163a2d4ab7999bd4ca56c0353f63d5 Mon Sep 17 00:00:00 2001
From: Bowen Liang <liangbowen@gf.com.cn>
Date: Thu, 14 Nov 2024 18:18:17 +0800
Subject: [PATCH] [KYUUBI #6774] Bump log4j from 2.20.0 to 2.24.1
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

# :mag: Description
## Issue References 🔗

This pull request fixes #

## Describe Your Solution 🔧

- bump log4j from 2.20.0(Feb 2023) to 2.24.1 (Sep 2024) : https://logging.apache.org/log4j/2.x/release-notes.html#release-notes-2-24-1

## Types of changes :bookmark:

- [ ] Bugfix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing functionality to change)

## Test Plan 🧪

#### Behavior Without This Pull Request :coffin:

#### Behavior With This Pull Request :tada:

#### Related Unit Tests

---

# Checklist 📝

- [ ] This patch was not authored or co-authored using [Generative Tooling](https://www.apache.org/legal/generative-tooling.html)

**Be nice. Be informative.**

Closes #6774 from bowenliang123/log4j-2.24.

Closes #6774

98a89ef8a [Bowen Liang] bump log4j from 2.20.0 to 2.24.1

Authored-by: Bowen Liang <liangbowen@gf.com.cn>
Signed-off-by: Kent Yao <yao@apache.org>
---
 dev/dependencyList | 8 ++++----
 pom.xml            | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/dev/dependencyList b/dev/dependencyList
index 0aaaa1f9c13..cfe61fb84bc 100644
--- a/dev/dependencyList
+++ b/dev/dependencyList
@@ -123,10 +123,10 @@ kubernetes-model-rbac/6.13.1//kubernetes-model-rbac-6.13.1.jar
 kubernetes-model-resource/6.13.1//kubernetes-model-resource-6.13.1.jar
 kubernetes-model-scheduling/6.13.1//kubernetes-model-scheduling-6.13.1.jar
 kubernetes-model-storageclass/6.13.1//kubernetes-model-storageclass-6.13.1.jar
-log4j-1.2-api/2.20.0//log4j-1.2-api-2.20.0.jar
-log4j-api/2.20.0//log4j-api-2.20.0.jar
-log4j-core/2.20.0//log4j-core-2.20.0.jar
-log4j-slf4j-impl/2.20.0//log4j-slf4j-impl-2.20.0.jar
+log4j-1.2-api/2.24.1//log4j-1.2-api-2.24.1.jar
+log4j-api/2.24.1//log4j-api-2.24.1.jar
+log4j-core/2.24.1//log4j-core-2.24.1.jar
+log4j-slf4j-impl/2.24.1//log4j-slf4j-impl-2.24.1.jar
 logging-interceptor/3.12.12//logging-interceptor-3.12.12.jar
 lz4-java/1.8.0//lz4-java-1.8.0.jar
 metrics-core/4.2.26//metrics-core-4.2.26.jar
diff --git a/pom.xml b/pom.xml
index 5cbdee5ee7b..c9e56b6eb14 100644
--- a/pom.xml
+++ b/pom.xml
@@ -177,7 +177,7 @@
         <kyuubi-relocated.version>0.4.1</kyuubi-relocated.version>
         <kyuubi-relocated-zookeeper.artifacts>kyuubi-relocated-zookeeper-34</kyuubi-relocated-zookeeper.artifacts>
         <ldapsdk.version>6.0.5</ldapsdk.version>
-        <log4j.version>2.20.0</log4j.version>
+        <log4j.version>2.24.1</log4j.version>
         <mysql.jdbc.version>8.0.32</mysql.jdbc.version>
         <mockito.version>4.11.0</mockito.version>
         <netty.version>4.1.108.Final</netty.version>