diff --git a/compiler/pom.xml b/compiler/pom.xml
index 3d3dc51f648..2173548aecf 100644
--- a/compiler/pom.xml
+++ b/compiler/pom.xml
@@ -103,7 +103,7 @@
         <profile>
             <id>release</id>
             <properties>
-                <log4j2_version>2.16.0</log4j2_version>
+                <log4j2_version>2.17.0</log4j2_version>
             </properties>
             <build>
                 <plugins>
diff --git a/dubbo-dependencies-bom/pom.xml b/dubbo-dependencies-bom/pom.xml
index 61a30fbb396..4837738ac1c 100644
--- a/dubbo-dependencies-bom/pom.xml
+++ b/dubbo-dependencies-bom/pom.xml
@@ -139,7 +139,7 @@
         <log4j_version>1.2.16</log4j_version>
         <logback_version>1.2.2</logback_version>
         <!-- Fix the bug of log4j refer:https://github.com/apache/logging-log4j2/pull/608 -->
-        <log4j2_version>2.16.0</log4j2_version>
+        <log4j2_version>2.17.0</log4j2_version>
         <commons_io_version>2.7</commons_io_version>
 
         <embedded_redis_version>0.10.0</embedded_redis_version>
diff --git a/dubbo-spring-boot/pom.xml b/dubbo-spring-boot/pom.xml
index afeaa033741..67511a04b92 100644
--- a/dubbo-spring-boot/pom.xml
+++ b/dubbo-spring-boot/pom.xml
@@ -42,7 +42,7 @@
         <spring-boot.version>2.3.1.RELEASE</spring-boot.version>
         <dubbo.version>${revision}</dubbo.version>
         <!-- Fix the bug of log4j refer:https://github.com/apache/logging-log4j2/pull/608 -->
-        <log4j2_version>2.16.0</log4j2_version>
+        <log4j2_version>2.17.0</log4j2_version>
     </properties>
 
     <dependencyManagement>
diff --git a/pom.xml b/pom.xml
index f6db4513c51..4302c04c60d 100644
--- a/pom.xml
+++ b/pom.xml
@@ -323,7 +323,7 @@
         <profile>
             <id>release</id>
             <properties>
-                <log4j2_version>2.16.0</log4j2_version>
+                <log4j2_version>2.17.0</log4j2_version>
             </properties>
             <build>
                 <plugins>