Details
-
Improvement
-
Status: Resolved
-
Minor
-
Resolution: Fixed
-
1.14.0
Description
Logback 1.2.6 includes internal configuration updates to avoid potential XML External Entity injection when parsing logback.xml as described in LOGBACK-1465. SLF4J 1.7.32 includes a minor update to the SLF4J Simple implementation to address potential concurrency issues as described in SLF4J-515. Both dependencies should be upgraded for all components.
Attachments
Issue Links
- links to