search

ops4j / org.ops4j.pax.logging

The OSGi Logging framework implementation. Supports SLF4J,LOG4J,JCL etc.
https://ops4j1.jira.com/wiki/spaces/paxlogging/overview
Apache License 2.0
47 stars 79 forks source link

Upgrade logback to 1.2.9 #424

Closed mattrpav closed 2 years ago

mattrpav commented 2 years ago

CVE-2021-42550

ref: https://jira.qos.ch/browse/LOGBACK-1591

grgrzybek commented 2 years ago

As with #423, I'll check the changes in ch/qos/logback/classic/spi/PackagingDataCalculator.java between 1.2.3 and 1.2.9, as pax-logging-logback shades this class. Please give me ~1 day.

grgrzybek commented 2 years ago

(sorry - I confused PR with an issue)