Matt Pavlovich created KARAF-7299:
-------------------------------------
Summary: Review logback CVE for impact to karaf
Key: KARAF-7299
URL: https://issues.apache.org/jira/browse/KARAF-7299
Project: Karaf
Issue Type: Task
Affects Versions: 4.3.3, 4.2.12
Reporter: Matt Pavlovich
Logback CVE along the lines of Log4Shell.
logback fixed in v1.2.9
Notes:
# Karaf does not install logback bundle from pax-logging by default
# there is no feature to install pax-logging-logback
# Users must manually enable logback
ref: https://jira.qos.ch/browse/LOGBACK-1591
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
