[
https://issues.apache.org/jira/browse/SHIRO-860?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17489300#comment-17489300
]
Francois Papon commented on SHIRO-860:
--------------------------------------
Thanks, even logback is only used for sample project, it's always good to
upgrade.
> update logback to 1.2.10
> ------------------------
>
> Key: SHIRO-860
> URL: https://issues.apache.org/jira/browse/SHIRO-860
> Project: Shiro
> Issue Type: Improvement
> Reporter: PJ Fanning
> Assignee: Francois Papon
> Priority: Major
> Fix For: 2.0.0, 1.9.0
>
> Time Spent: 10m
> Remaining Estimate: 0h
>
> Logback has security enhancements in v1.2.9 (related to the log4j issues) but
> there is now v1.2.10 too.
> Would it be possible to upgrade to a newer version?
> [https://logback.qos.ch/news.html]
> [https://github.com/apache/shiro/blob/main/pom.xml#L108]
>
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
