Debian/logback: critical 9.8
QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.
Action: Upgrade logback to 1:1.1.9-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:1.1.9-3 | - |
Fixed versions
| 1:1.1.9-3 |
Sources
- osv: DEBIAN-CVE-2017-5929#Debian:13/logback
- https://security-tracker.debian.org/tracker/CVE-2017-5929
published · modified · JSON