You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@nifi.apache.org by "David Handermann (Jira)" <ji...@apache.org> on 2024/12/20 16:30:00 UTC

[jira] [Created] (NIFI-14102) Upgrade Logback to 1.5.14

David Handermann created NIFI-14102:
---------------------------------------

             Summary: Upgrade Logback to 1.5.14
                 Key: NIFI-14102
                 URL: https://issues.apache.org/jira/browse/NIFI-14102
             Project: Apache NiFi
          Issue Type: Improvement
            Reporter: David Handermann
            Assignee: David Handermann


Logback [1.5.14|https://logback.qos.ch/news.html#1.5.14] includes compatibility updates for Spring Boot and also incorporates changes from Logback [1.5.13|https://logback.qos.ch/news.html#1.5.13] to mitigate CVE-2024-12801 related to the SaxEventReader and CVE-2024-12798 related to the JaninoEventEvaluator. The project does not use either of these Logback features in the default configuration.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)