CLSA-2026-1785917146 TuxCare security update for ch.qos.logback (1 CVE)

TuxCare rebuilt 6 ch.qos.logback packages to address 1 CVE. Fixed in 1.2.12-tuxcare.1...

CLSA-2026-1784769539 TuxCare security update for ch.qos.logback (1 CVE)

TuxCare rebuilt 4 ch.qos.logback packages to address 1 CVE. Fixed in 1.4.11-tuxcare.1...

CLSA-2026-1783558958 TuxCare security update for ch.qos.logback (2 CVEs)

TuxCare rebuilt 4 ch.qos.logback packages to address 2 CVEs. Fixed in 1.5.18-tuxcare.1...

CLSA-2025-1765930089 TuxCare security update for ch.qos.logback (1 CVE)

TuxCare rebuilt 2 ch.qos.logback packages to address 1 CVE. Fixed in 1.2.13-tuxcare.1...

CLSA-2025-1752710588 TuxCare security update for ch.qos.logback (2 CVEs)

TuxCare rebuilt 2 ch.qos.logback packages to address 2 CVEs. Fixed in 1.2.13.tuxcare...

Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite - Monitor Component uses HdrHistogram-2.2.2.jar, logback-core-1.5.32.jar which are vulnerable to CVE-2026-14683, CVE-2026-14684, CVE-2026-14685, CVE-2026-14686, CVE-2026-10532 and CVE-2026-9828. Vulnerability Details CVEID:CVE-2026-10532 DESCRIPTION:...

ROOT-APP-MAVEN-CVE-2023-6481 CVE-2023-6481 in io.root.ch.qos.logback:logback-core - Patched by Root

Root has patched CVE-2023-6481 in the io.root.ch.qos.logback:logback-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-11226 CVE-2025-11226 in io.root.ch.qos.logback:logback-core - Patched by Root

Root has patched CVE-2025-11226 in the io.root.ch.qos.logback:logback-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-12798 CVE-2024-12798 in io.root.ch.qos.logback:logback-core - Patched by Root

Root has patched CVE-2024-12798 in the io.root.ch.qos.logback:logback-core package for Root:Maven. Multiple fixed versions available...

Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway for Multiplatforms

Summary Multiple vulnerabilities have been found in CICS Transaction Gateway for Multiplatforms due to the use of Apache Tomcat Embed, Spring Web MVC, Spring Boot, Spring Core, Spring Context, Spring Beans and Logback Core. The Apache Tomcat Embed, Spring Web MVC, Spring Boot, Spring Core, Spring...

Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway Desktop Edition.

Summary Multiple vulnerabilities have been found in CICS Transaction Gateway Desktop Edition due to the use of Apache Tomcat Embed, Spring Web MVC, Spring Boot, Spring Core, Spring Context, SnakeYAML, Spring Beans, Logback Classic and Logback Core. The Apache Tomcat Embed, Spring Web MVC, Spring...

ROOT-APP-MAVEN-CVE-2024-12801 CVE-2024-12801 in io.root.ch.qos.logback:logback-core - Patched by Root

Root has patched CVE-2024-12801 in the io.root.ch.qos.logback:logback-core package for Root:Maven. Multiple fixed versions available...

Security Bulletin: IBM Operational Decision Manager for June 2026 - Multiple CVEs addressed

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Operational Decision Manager Vulnerability Details CVEID:CVE-2026-9828 DESCRIPTION: Deserialization of untrusted data vulnerability in QOS.CH Sarl logback...

Injection logback-core Dependency in Confluence Data Center

This High severity Injection vulnerability was introduced in versions 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This Injection vulnerability, with a CVSS Score of 7 and a CVSS Vector of...

logback-1.5.36-1.1 on GA media (moderate)

logback-1.5.36-1.1 on GA media Announcement ID: openSUSE-SU-2026:11135-1 Rating: moderate Cross-References: CVE-2026-13006 CVSS scores: CVE-2026-13006 SUSE : 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

Linux Distros Unpatched Vulnerability : CVE-2026-13006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.36 in Java applications, allows an attacke...

SUSE CVE-2026-13006

ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.36 in Java applications, allows an attacker to execute arbitrary code circumventing existing protections against CVE-2025-11226 by compromising an existing logback configuration...

OPENSUSE-SU-2026:11135-1 logback-1.5.36-1.1 on GA media

These are all security issues fixed in the logback-1.5.36-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-53340

These are all security issues fixed in the logback-1.5.36-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-13006

A flaw was found in logback-core, a logging framework for Java applications. This vulnerability allows an attacker with existing privileges and write access to a configuration file, or the ability to inject a malicious environment variable, to execute arbitrary code. This can be achieved by...