augustd / owasp-security-logging

OWASP Security Logging library for Java
https://www.owasp.org/index.php/OWASP_Security_Logging_Project
Apache License 2.0
115 stars 35 forks source link

Resolves #71 - Updates the logback version #72

Closed rdifrango closed 2 years ago

rdifrango commented 2 years ago

Resolves #71

Updates the logback version

The details can be found at:

http://slf4j.org/log4shell.html

The key details are these lines:

However, logback may make JNDI calls from within its configuration file. This was recently reported in LOGBACK-1591 as a vulnerability of lesser severity. In response, we have released logback version 1.2.8. Please upgrade.