You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cassandra.apache.org by "Jai Sharma (Jira)" <ji...@apache.org> on 2025/08/01 06:46:00 UTC
[jira] [Created] (CASSANDRA-20810) Update logback jar version in branch cassandra-4.0
Jai Sharma created CASSANDRA-20810:
--------------------------------------
Summary: Update logback jar version in branch cassandra-4.0
Key: CASSANDRA-20810
URL: https://issues.apache.org/jira/browse/CASSANDRA-20810
Project: Apache Cassandra
Issue Type: Task
Reporter: Jai Sharma
cassandra-4.0 is using logback-core and logback-classic version 1.2.9 which has following vulnerabilities.
* CVE-2023-6378
* CVE-2024-12798
* CVE-2024-12801
Upgrade logback-core and logback-classic to version 1.3.15 which has fixes for all 3.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cassandra.apache.org
For additional commands, e-mail: commits-help@cassandra.apache.org