Re: update of logback to 1.28

2021-12-15 Thread Markus Koschany
Hi tony, Am Mittwoch, dem 15.12.2021 um 12:20 -0800 schrieb tony mancill: > Hello Java Team, > > I have prepared an update of logback to 1.2.8, which addresses the same > type of JNDI vulnerability recently announced for log4j2. > > Additional details in https://jira.qos.ch/browse/LOGBACK-1591 

update of logback to 1.28

2021-12-15 Thread tony mancill
Hello Java Team, I have prepared an update of logback to 1.2.8, which addresses the same type of JNDI vulnerability recently announced for log4j2. Additional details in https://jira.qos.ch/browse/LOGBACK-1591 and https://github.com/qos-ch/logback/compare/v_1.2.7...v_1.2.8 A CVE has not yet been