diff --git a/log4j-parent/pom.xml b/log4j-parent/pom.xml
index 42d739fee20..238e5153535 100644
--- a/log4j-parent/pom.xml
+++ b/log4j-parent/pom.xml
@@ -85,7 +85,7 @@
     <h2.version>2.2.224</h2.version>
     <hamcrest.version>3.0</hamcrest.version>
     <HdrHistogram.version>2.2.2</HdrHistogram.version>
-    <hsqldb.version>2.7.3</hsqldb.version>
+    <hsqldb.version>2.7.4</hsqldb.version>
     <jackson-bom.version>2.18.1</jackson-bom.version>
     <!-- Override the version in Jakarta EE 9 BOM: -->
     <jakarta-activation.version>2.1.3</jakarta-activation.version>
diff --git a/src/changelog/.2.x.x/update_org_hsqldb_hsqldb.xml b/src/changelog/.2.x.x/update_org_hsqldb_hsqldb.xml
new file mode 100644
index 00000000000..c7930487666
--- /dev/null
+++ b/src/changelog/.2.x.x/update_org_hsqldb_hsqldb.xml
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+       xmlns="https://logging.apache.org/xml/ns"
+       xsi:schemaLocation="https://logging.apache.org/xml/ns https://logging.apache.org/xml/ns/log4j-changelog-0.xsd"
+       type="updated">
+  <issue id="3163" link="https://github.com/apache/logging-log4j2/pull/3163"/>
+  <description format="asciidoc">Update `org.hsqldb:hsqldb` to version `2.7.4`</description>
+</entry>