Upgrade to Logback 1.2.9 #29012

Activity

1. snicoll

   added

   type: dependency-upgradeA dependency upgradeA dependency upgrade

   on Dec 14, 2021
2. snicoll

   added this to the 2.6.2 milestone on Dec 14, 2021
3. snicoll

   self-assigned this

   on Dec 14, 2021
4. bclozel

   pinned this issue on Dec 14, 2021
5. bclozel commented on Dec 14, 2021

   

   bclozel

   on Dec 14, 2021

   Member

   More actions

   See https://jira.qos.ch/browse/LOGBACK-1591 and https://logback.qos.ch/news.html for background information.
   Also:

   We note that the vulnerability mentioned in LOGBACK-1591 requires write access to logback's configuration file as a prerequisite. Thus, in addition to upgrading to version 1.2.8, we also recommend users to set their logback configuration files as read-only.
6. snicoll

   added a commit that references this issue on Dec 14, 2021

   Upgrade to Logback 1.2.8

   ...

   This issue will close once commit d8eab45 is merged into the 'main' branch.

   d8eab45
7. snicoll

   closed this as completedin d8eab45on Dec 14, 2021
8. MilosHavranek commented on Dec 17, 2021

   

   MilosHavranek

   on Dec 17, 2021

   Last edited by MilosHavranek

   More actions

   https://jira.qos.ch/browse/LOGBACK-1591?focusedCommentId=20920&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-20920

   @snicoll
   I suggest re-open this ticket and update to Logback 1.2.9

   Logback version 1.2.9 and 1.3.0-alpha11 have been released simultaneously. They should be considered as security fixes superseding 1.2.8.

   👍React with 👍1Reacted by Jeeppler
9. bclozel

   reopened this on Dec 17, 2021
10. bclozel

    changed the title [-] Upgrade to Logback 1.2.8[/-] on Dec 17, 2021
11. bclozel

    added a commit that references this issue on Dec 17, 2021

    Merge branch '2.5.x' into 2.6.x

    ...

    This issue will close once commit 1c35ec2 is merged into the 'main' branch.

    1c35ec2
12. bclozel

    closed this as completedin 1c35ec2on Dec 17, 2021
13. x80486 commented on Dec 29, 2021

    

    x80486

    on Dec 29, 2021 · Hidden as off-topic

    show commentMore actions
14. w6et commented on Jan 11, 2022

    

    w6et

    on Jan 11, 2022 · Hidden as resolved

    show commentMore actions
15. snicoll commented on Jan 12, 2022

    

    snicoll

    on Jan 12, 2022 · Hidden as resolved

    Author

    show commentMore actions
16. snicoll

    unpinned this issue on Jan 12, 2022