PR created for pax-logging against main: https://github.com/ops4j/org.ops4j.pax.logging/pull/425 <https://github.com/ops4j/org.ops4j.pax.logging/pull/425>
> On Dec 17, 2021, at 9:23 AM, Matt Pavlovich <mattr...@gmail.com> wrote: > > I summarized notes on the Logback CVE-2021-42550 . While significantly less > critical, we probably need to consider another round of releases to address > and bring in logback 1.2.9. > > notes here: https://issues.apache.org/jira/browse/KARAF-7299 > <https://issues.apache.org/jira/browse/KARAF-7299> > > Thoughts?
