lightbend-labs / scala-logging

Convenient and performant logging library for Scala wrapping SLF4J.
Apache License 2.0
910 stars 130 forks source link

Unpatched vulnerability - https://jira.qos.ch/browse/LOGBACK-1591 #308

Open sarahjryan opened 2 years ago

sarahjryan commented 2 years ago

https://jira.qos.ch/browse/LOGBACK-1591 I can't upgrade to logback 1.2.8 as getting error message "Class path contains SLF4J bindings targeting slf4j-api versions prior to 1.8" due to scala logging dependency on slf4j-api 1.7.30

SethTisue commented 2 years ago

https://github.com/lightbend/scala-logging/pull/306 and https://github.com/lightbend/scala-logging/pull/291 are merged, so I guess this will be fixed in the next release

MinZe25 commented 2 years ago

306 and #291 are merged, so I guess this will be fixed in the next release

When is the next release?

analytically commented 2 years ago

I'll be releasing a new version soon.

JD557 commented 2 years ago

Any updates on this? The last version is from 12 Jul 2021.