[
https://issues.apache.org/jira/browse/ZOOKEEPER-4957?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18014190#comment-18014190
]
Andor Molnar edited comment on ZOOKEEPER-4957 at 8/15/25 7:28 PM:
------------------------------------------------------------------
We ended up upgrading logging libraries on *branch-3.8* too, so we won't do
this for now.
was (Author: andorm):
We ended up upgrade logging libraries on *branch-3.8* too, so we won't do this
for now.
> Replace logback with slf4j-simple on branch-3.8 due to upgrading issues
> -----------------------------------------------------------------------
>
> Key: ZOOKEEPER-4957
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-4957
> Project: ZooKeeper
> Issue Type: Task
> Components: security, server, tests
> Affects Versions: 3.8.4
> Reporter: Andor Molnar
> Assignee: Andor Molnar
> Priority: Major
> Labels: pull-request-available
> Time Spent: 2h
> Remaining Estimate: 0h
>
> Logback versions 1.2.x have some CVEs which can only be resolved by upgrading
> to at least logback 1.3.x. Unfortunately it also involves upgrading SLF4j to
> 2.0.x which is not acceptable on branch-3.8. Instead we should try to replace
> logback with slf4j-simple, but that implies some test code changes as well.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
