tocsin

Debian/libslf4j-java: critical 9.8

org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in

Action: Upgrade libslf4j-java to 1.7.25-3 or later.

Affected

introducedfixedlast affected
01.7.25-3-

Fixed versions

1.7.25-3

Sources

published · modified · JSON