You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@zookeeper.apache.org by an...@apache.org on 2026/07/10 13:28:34 UTC

(zookeeper) branch branch-3.8 updated: ZOOKEEPER-5057: Upgrade logback to address CVE vulnerabilities

This is an automated email from the ASF dual-hosted git repository.

asf-gitbox-commits pushed a commit to branch branch-3.8
in repository https://gitbox.apache.org/repos/asf/zookeeper.git


The following commit(s) were added to refs/heads/branch-3.8 by this push:
     new 9c61fd111 ZOOKEEPER-5057: Upgrade logback to address CVE vulnerabilities
9c61fd111 is described below

commit 9c61fd111fe77f741f4d3b1bab4716c1445c63f2
Author: Badreddine Itani <ba...@gmail.com>
AuthorDate: Thu Jul 9 22:56:25 2026 +0300

    ZOOKEEPER-5057: Upgrade logback to address CVE vulnerabilities
    
    Reviewers: anmolnar, PDavid
    Author: BadreddineItani
    Closes #2412 from BadreddineItani/ZOOKEEPER-5057
    
    (cherry picked from commit 064cf6c4d58e2ed817d444c7d17249da68fa9265)
    Signed-off-by: Andor Molnar <an...@cloudera.com>
---
 pom.xml                                                                 | 2 +-
 ...ck-classic-1.3.15.LICENSE.txt => logback-classic-1.5.37.LICENSE.txt} | 0
 ...{logback-core-1.3.15.LICENSE.txt => logback-core-1.5.37.LICENSE.txt} | 0
 3 files changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index b7103b059..4be264cdf 100644
--- a/pom.xml
+++ b/pom.xml
@@ -459,7 +459,7 @@
 
     <!-- dependency versions -->
     <slf4j.version>2.0.13</slf4j.version>
-    <logback-version>1.3.15</logback-version>
+    <logback-version>1.5.37</logback-version>
     <audience-annotations.version>0.12.0</audience-annotations.version>
     <jmockit.version>1.48</jmockit.version>
     <junit.version>5.6.2</junit.version>
diff --git a/zookeeper-server/src/main/resources/lib/logback-classic-1.3.15.LICENSE.txt b/zookeeper-server/src/main/resources/lib/logback-classic-1.5.37.LICENSE.txt
similarity index 100%
rename from zookeeper-server/src/main/resources/lib/logback-classic-1.3.15.LICENSE.txt
rename to zookeeper-server/src/main/resources/lib/logback-classic-1.5.37.LICENSE.txt
diff --git a/zookeeper-server/src/main/resources/lib/logback-core-1.3.15.LICENSE.txt b/zookeeper-server/src/main/resources/lib/logback-core-1.5.37.LICENSE.txt
similarity index 100%
rename from zookeeper-server/src/main/resources/lib/logback-core-1.3.15.LICENSE.txt
rename to zookeeper-server/src/main/resources/lib/logback-core-1.5.37.LICENSE.txt