diff --git a/release-notes/opensearch-security.release-notes-1.3.15.0.md b/release-notes/opensearch-security.release-notes-1.3.15.0.md new file mode 100644 index 0000000000..31c31056fb --- /dev/null +++ b/release-notes/opensearch-security.release-notes-1.3.15.0.md @@ -0,0 +1,9 @@ +## 2024-03-05 Version 1.3.15.0 + +Compatible with OpenSearch 1.3.15 + +### Maintenance + +* Bump Logback Classic to 1.2.13 (resolves CVE-2023-6481) ([#3846](https://github.com/opensearch-project/security/pull/3846)) +* Remove json-smart and json-path dependencies ([#3982](https://github.com/opensearch-project/security/pull/3982)) +* Force logback to version 1.2.13 to resolve CVE-2023-6378 ([#4051](https://github.com/opensearch-project/security/pull/4051))