Debian/logback: critical 9.8
QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.
Action: Upgrade logback to 1:1.1.9-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:1.1.9-3 | - |
Fixed versions
| 1:1.1.9-3 |
Sources
published · modified · JSON