[logback-dev] Security patches for Logback