Download Latest Version 2.25.3 source code.tar.gz (2.9 MB)
Email in envelope

Get an email when there's a new version of Apache Log4j

Home / rel_2.25.3
Name Modified Size InfoDownloads / Week
Parent folder
2.25.3 source code.tar.gz 2025-12-16 2.9 MB
2.25.3 source code.zip 2025-12-16 8.2 MB
README.md 2025-12-16 789 Bytes
Totals: 3 Items   11.0 MB 12

This patch release addresses issues detailed in the changelog below. In particular, it includes an important fix for the host name verification in SSL/TLS configuration. This is used by Socket Appender.

Changed

  • Optimize DefaultThreadContextMap.getCopy() performance by avoiding megamorphic calls in HashMap constructor (#3935, [#3939])

Fixed

  • Fix GraalVM metadata for nested classes to use binary names instead of canonical names (#3871, [#3996])
  • Fix failures caused by null SslConfiguration (#3947, [#3953])
  • Fix incorrect handling of the host name verification in SSL/TLS configuration, which is used by Socket Appender when SSL/TLS is enabled (#4002)

Removed

  • Remove the com.github.spotbugs:spotbugs-annotations dependency (#3984, [#3985])
Source: README.md, updated 2025-12-16