[
https://issues.apache.org/jira/browse/NIFI-9486?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17459466#comment-17459466
]
ASF subversion and git services commented on NIFI-9486:
-------------------------------------------------------
Commit e7449bf0d3fa1612f2019603f09b8bc99d0b26a7 in nifi's branch
refs/heads/main from Bryan Bende
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=e7449bf ]
NIFI-9486 This closes #5604. Add compile scope to logging deps in
nifi-registry-assembly
NIFI-9486 Add compile scope to logging deps in minifi-assembly
This commit is 2 of 2.
Signed-off-by: Joe Witt <[email protected]>
> Upgrade to logback 1.2.8
> ------------------------
>
> Key: NIFI-9486
> URL: https://issues.apache.org/jira/browse/NIFI-9486
> Project: Apache NiFi
> Issue Type: Improvement
> Reporter: Bryan Bende
> Assignee: Bryan Bende
> Priority: Major
> Fix For: 1.16.0, 1.15.1
>
> Time Spent: 40m
> Remaining Estimate: 0h
>
> Logback just released version 1.2.8 to address a vulnerability described in
> [https://jira.qos.ch/browse/LOGBACK-1591] . We are currently on logback 1.2.6.
> And another vulnerability arguably from 1.2.7
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
