Hi No again Camel does not use logback - we only use slfj4-api as the logging api facade. What YOU use as logging framework when running your Java and Camel applications is on YOU. https://camel.apache.org/blog/2021/12/log4j2/
In the upcoming releases we are of course upgrading dependencies (we do that all the time). We only use log4j and logback for testing Camel itself, and for some of the examples. On Wed, Dec 22, 2021 at 11:16 AM Vyacheslav Boyko <mail4...@gmail.com> wrote: > > Hi! > > A vulnerability have found into Logback and fixed in 1.2.9 version. > > https://jira.qos.ch/browse/LOGBACK-1591 > > Do we need a fix? > > > -- > Vyacheslav Boyko > mailto:mail4...@gmail.com > -- Claus Ibsen ----------------- http://davsclaus.com @davsclaus Camel in Action 2: https://www.manning.com/ibsen2