ch.qos.logback:logback-access (0.9.12), ch.qos.logback:logback-classic (0.9.12) +1 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.9.12)

ch.qos.logback:logback-core MAVEN version 0.9.12 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.12 - ch.qos.logback:logback-classic 0.9.12 -...

ch.qos.logback:log4j-bridge (0.9.3), ch.qos.logback:logback-access (0.9.3) +2 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.9.3)

ch.qos.logback:logback-core MAVEN version 0.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:log4j-bridge 0.9.3 - ch.qos.logback:logback-access 0.9.3 - ch.qos.logback:logback-classic...

ch.qos.logback:log4j-bridge (0.9.1), ch.qos.logback:logback-access (0.9.1) +2 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.9.1)

ch.qos.logback:logback-core MAVEN version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:log4j-bridge 0.9.1 - ch.qos.logback:logback-access 0.9.1 - ch.qos.logback:logback-classic...

ch.qos.logback:logback-access (0.9.10), ch.qos.logback:logback-classic (0.9.10) +1 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.9.10)

ch.qos.logback:logback-core MAVEN version 0.9.10 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.10 - ch.qos.logback:logback-classic 0.9.10 -...

ch.qos.logback:log4j-bridge (0.9.2), ch.qos.logback:logback-access (0.9.2) +2 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.9.2)

ch.qos.logback:logback-core MAVEN version 0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:log4j-bridge 0.9.2 - ch.qos.logback:logback-access 0.9.2 - ch.qos.logback:logback-classic...

ch.qos.logback:log4j-bridge (0.7), ch.qos.logback:logback-access (0.7) +2 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.7)

ch.qos.logback:logback-core MAVEN version 0.7 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:log4j-bridge 0.7 - ch.qos.logback:logback-access 0.7 - ch.qos.logback:logback-classic 0.7 -...

ch.qos.logback:logback-access (0.9.28), ch.qos.logback:logback-classic (0.9.28) +113 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.9.28)

ch.qos.logback:logback-core MAVEN version 0.9.28 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.28 - ch.qos.logback:logback-classic 0.9.28 -...

ch.qos.logback:logback-access (0.9.19), ch.qos.logback:logback-classic (0.9.19) +17 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.9.19)

ch.qos.logback:logback-core MAVEN version 0.9.19 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.19 - ch.qos.logback:logback-classic 0.9.19 -...

ch.hortis.sonar:sonar-application (>=1.0-beta, <=1.0.2), ch.hortis.sonar:sonar-commons (>=1.0-beta, <=1.0.2) +24 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.9.8)

ch.qos.logback:logback-core MAVEN version 0.9.8 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.hortis.sonar:sonar-application =1.0-beta, =1.0-beta, =1.0-beta, =1.0-beta, =1.0-beta, =0.9.9, =0.9.9,...

ch.qos.logback:logback-access (0.9.18), ch.qos.logback:logback-classic (0.9.18) +45 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.9.18)

ch.qos.logback:logback-core MAVEN version 0.9.18 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.18 - ch.qos.logback:logback-classic 0.9.18 -...

Upgrade Logback for CVE-2021-42550

h3. Issue Summary In the wake of Log4Shell, CVE-2021-42550 has been created for similar JNDI considerations in Logback. The Logback maintainers have removed some functionality from Logback in response and released Logback 1.2.9. Please note: There is no RCE in Logback, and there is no vulnerabili...

Upgrade Logback for CVE-2021-42550

h3. Issue Summary In the wake of Log4Shell, CVE-2021-42550 has been created for similar JNDI considerations in Logback. The Logback maintainers have removed some functionality from Logback in response and released Logback 1.2.9. Please note: There is no RCE in Logback, and there is no vulnerabili...

CVE-2021-42550

A flaw was found in the logback package. When using a specially-crafted configuration, this issue could allow a remote authenticated attacker to execute arbitrary code loaded from LDAP servers...

OPENSUSE-SU-2021:4109-1 Security update for logback

This update for logback fixes the following issues: Upgrade to version 1.2.8 + In response to log4Shell/CVE-2021-44228, all JNDI lookup code in logback has been disabled until further notice. This impacts ContextJNDISelector and insertFromJNDI element in configuration files. + Also in response to...

Deserialization of Untrusted Data

In logback version 1.2.9 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers...

Security update for logback (important)

openSUSE Security Update: Security update for logback Announcement ID: openSUSE-SU-2021:4109-1 Rating: important References: 1193795 Cross-References: CVE-2021-44228 CVSS scores: CVE-2021-44228 NVD : 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVE-2021-44228 SUSE: 9.8...

CVE-2021-42550

In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers...

CVE-2021-42550

In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers...

DEBIAN-CVE-2021-42550

In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers...

Design/Logic Flaw

In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers...