Merge pull request #184 from cinovo/updatelog4j

updating log4j dependency

Author: siglocpp

CHANGELOG.md

@@ -10,7 +10,7 @@
     * JSON Small and Fast Parser 2.5.2
     * Junit 5.11.4
     * Liquibase 4.32.0
-    * Log4J 2.25.2
+    * Log4J 2.25.3
     * Mongo Java Driver 4.11.5
     * Mongock 5.5.1
     * Nimbus JOSE+JWT 10.3
@@ -23,7 +23,7 @@
 * Bugfix: Better error handling in CloudconductorPropertyProvider
 * Bugfix: Throw of timeout exceptions for retries instead of DaemonError, restore 1.35 behavior 
 * Bugfix: Fallback for old dates (before 1970) for mongo
-* Fixed vulnerabilities: CVE-2024-13009(Jetty), CVE-2025-23184(Apache CXF), CVE-2024-57699 (Json-smart),CVE-2025-27533 (ActiveMQ)
+* Fixed vulnerabilities: CVE-2024-13009(Jetty), CVE-2025-23184(Apache CXF), CVE-2024-57699 (Json-smart),CVE-2025-27533 (ActiveMQ),CVE-2025-68161(Log4j)
 * Logging improvement and extension options for DaemonMessageListener
 * Add TLS server parameters for JAX-RS
 * Improved Errormessage in case of non parseable JSON strings in the space of InterconnectObjects and Messsaging.

pom.xml

@@ -65,7 +65,7 @@
         <jetty.version>9.4.58.v20250814</jetty.version>
         <joda.time.version>2.14.0</joda.time.version>
         <junit.version>5.11.4</junit.version><!-- newer JUnit version not working with Mockito-->
-        <log4j.version>2.25.2</log4j.version>
+        <log4j.version>2.25.3</log4j.version>
         <mockito-core.version>4.11.0</mockito-core.version>
         <mongo.version>4.11.5</mongo.version>
         <mongock.version>5.5.1</mongock.version>