2.8.0 Release

xeraph released this 27 Jan 06:59

· 23 commits to main since this release

d5d8a3a

Support CVE-2022-23302, CVE-2022-23305 and CVE-2022-23307, See #259
- --fix option will remove following classes:
  - For CVE-2022-23302: JMSSink.class
  - For CVE-2022-23305: JDBCAppender.class
  - For CVE-2022-23307: All classes in org.apache.log4j.chainsaw package

Assets 8