[SHIRO-860] update logback to 1.2.10

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Resolved
• Fix Version/s: 2.0.0-alpha, 1.9.0
• Assignee: Francois Papon
• Reporter: PJ Fanning
• Created: 08/Feb/22 23:32
• Updated: 09/Feb/22 07:44
• Resolved: 09/Feb/22 07:44

Description

Logback has security enhancements in v1.2.9 (related to the log4j issues) but there is now v1.2.10 too.

Would it be possible to upgrade to a newer version?

https://logback.qos.ch/news.html

https://github.com/apache/shiro/blob/main/pom.xml#L108

 

Issue Links

• links to: GitHub Pull Request #345