CLSA-2026-1792015408 TuxCare security update for ch.qos.logback (3 CVEs)

TuxCare rebuilt 6 ch.qos.logback packages to address 3 CVEs. Fixed in 1.2.3-tuxcare.2...

CLSA-2026-1792015256 TuxCare security update for ch.qos.logback (4 CVEs)

TuxCare rebuilt 6 ch.qos.logback packages to address 4 CVEs. Fixed in 1.2.12-tuxcare.2...

CLSA-2026-1792015091 TuxCare security update for ch.qos.logback (2 CVEs)

TuxCare rebuilt 4 ch.qos.logback packages to address 2 CVEs. Fixed in 1.4.14-tuxcare.2...

CLSA-2026-1792011837 TuxCare security update for ch.qos.logback (2 CVEs)

TuxCare rebuilt 6 ch.qos.logback packages to address 2 CVEs. Fixed in 1.2.5-tuxcare.1...

CLSA-2026-1791881293 TuxCare security update for ch.qos.logback (3 CVEs)

TuxCare rebuilt 6 ch.qos.logback packages to address 3 CVEs. Fixed in 1.2.11-tuxcare.1...

Path Traversal

ch.qos.logback, logback-classic is vulnerable to a path-traversal. The vulnerability is due to an unsanitized MDC-based discriminator value being used in a nested FileAppender path, which allows an attacker who can influence the MDC value, such as through an HTTP header, to create and append log...

PT-2026-80015

TuxCare rebuilt 6 ch.qos.logback packages to address 1 CVE. Fixed in 1.2.3-tuxcare.1...

PT-2026-75868

TuxCare rebuilt 6 ch.qos.logback packages to address 3 CVEs. Fixed in 1.2.12-tuxcare.1...

CLSA-2026-1784682821 TuxCare security update for ch.qos.logback (1 CVE)

TuxCare rebuilt 4 ch.qos.logback packages to address 1 CVE. Fixed in 1.5.18-tuxcare.2...

CLSA-2025-1762906009 TuxCare security update for ch.qos.logback (4 CVEs)

TuxCare rebuilt 6 ch.qos.logback packages to address 4 CVEs. Fixed in 1.1.7-tuxcare.1...

CLSA-2025-1767053309 TuxCare security update for ch.qos.logback (3 CVEs)

TuxCare rebuilt 4 ch.qos.logback packages to address 3 CVEs. Fixed in 1.4.14-tuxcare.1...

PT-2026-75644

TuxCare rebuilt 4 ch.qos.logback packages to address 1 CVE. Fixed in 1.4.11-tuxcare.1...

PT-2026-73491

TuxCare rebuilt 2 ch.qos.logback packages to address 2 CVEs. Fixed in 1.2.13.tuxcare...

PT-2026-73651

TuxCare rebuilt 2 ch.qos.logback packages to address 3 CVEs. Fixed in 1.2.13-tuxcare.1...

PT-2026-75332

TuxCare rebuilt 4 ch.qos.logback packages to address 2 CVEs. Fixed in 1.5.18-tuxcare.1...

PT-2026-73607

TuxCare rebuilt 6 ch.qos.logback packages to address 4 CVEs. Fixed in 1.1.7-tuxcare.1...

PT-2026-75556

TuxCare rebuilt 4 ch.qos.logback packages to address 1 CVE. Fixed in 1.5.18-tuxcare.2...

PT-2026-73677

TuxCare rebuilt 4 ch.qos.logback packages to address 3 CVEs. Fixed in 1.4.14-tuxcare.1...

br.com.objectos:boleto (0.1.0), br.com.objectos:bvmf (>=0.1.0, <=0.1.1) +191 more potentially affected by CVE-2026-1225 via ch.qos.logback:logback-core (0.9.29)

ch.qos.logback:logback-core MAVEN version 0.9.29 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - br.com.objectos:boleto 0.1.0 - br.com.objectos:bvmf =0.1.0, =0.1.0, =0.4.0 -...

ai.acolite:openai-agent-sdk (>=0.1.0, <=0.4.0), ai.aletyx.kogito:aletyx-kogito-ai-addons-springboot-adhoc-subprocess-storage-jpa (>=0.1.0, <=0.2.0) +26881 more potentially affected by CVE-2025-11226 via ch.qos.logback:logback-core (>=1.4.0, <=1.5.18)

ch.qos.logback:logback-core MAVEN version =1.4.0, =0.1.0, =0.1.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.1.0, =0.9.0 - ai.chat2db.excel:easyexcel-plus-test 0.0.1 - ai.djl.spring:djl-spring-boot-starter-autoconfigure 0.26 - ai.djl.spring:djl-spring-boot-starter-mxnet-auto 0.26 -...