ch.qos.logback:logback-access (0.9.20), ch.qos.logback:logback-classic (0.9.20) +25 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.9.20)

ch.qos.logback:logback-core MAVEN version 0.9.20 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.20 - ch.qos.logback:logback-classic 0.9.20 -...

ch.qos.logback:logback-access (0.9.22), ch.qos.logback:logback-classic (0.9.22) +1 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.9.22)

ch.qos.logback:logback-core MAVEN version 0.9.22 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.22 - ch.qos.logback:logback-classic 0.9.22 -...

ch.qos.logback:logback-access (0.9.23), ch.qos.logback:logback-classic (0.9.23) +1 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.9.23)

ch.qos.logback:logback-core MAVEN version 0.9.23 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.23 - ch.qos.logback:logback-classic 0.9.23 -...

ch.qos.logback:logback-access (0.9.24), ch.qos.logback:logback-classic (0.9.24) +69 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.9.24)

ch.qos.logback:logback-core MAVEN version 0.9.24 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.24 - ch.qos.logback:logback-classic 0.9.24 -...

ch.qos.logback:logback-access (0.9.25), ch.qos.logback:logback-classic (0.9.25) +8 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.9.25)

ch.qos.logback:logback-core MAVEN version 0.9.25 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.25 - ch.qos.logback:logback-classic 0.9.25 -...

ch.qos.logback:logback-access (0.9.26), ch.qos.logback:logback-classic (0.9.26) +126 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.9.26)

ch.qos.logback:logback-core MAVEN version 0.9.26 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.26 - ch.qos.logback:logback-classic 0.9.26 -...

ch.qos.logback:logback-access (0.9.27), ch.qos.logback:logback-classic (0.9.27) +34 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.9.27)

ch.qos.logback:logback-core MAVEN version 0.9.27 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.27 - ch.qos.logback:logback-classic 0.9.27 -...

ch.qos.logback:logback-access (0.9.28), ch.qos.logback:logback-classic (0.9.28) +113 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.9.28)

ch.qos.logback:logback-core MAVEN version 0.9.28 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.28 - ch.qos.logback:logback-classic 0.9.28 -...

br.com.objectos:boleto (0.1.0), br.com.objectos:bvmf (>=0.1.0, <=0.1.1) +191 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.9.29)

ch.qos.logback:logback-core MAVEN version 0.9.29 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - br.com.objectos:boleto 0.1.0 - br.com.objectos:bvmf =0.1.0, =0.1.0, =0.4.0 -...

aero.champ:cargojson (1.0), africa.absa:inception-application (>=1.0.0, <=1.0.1) +46248 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (>=1.0.0, <=1.2.8)

ch.qos.logback:logback-core MAVEN version =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.3.0, =0.2, =0.2, =0.2, =0.2, =0.2, =0.11 and more Source cves: CVE-2021-42550 Source advisory: GHSA-668Q-QRV7-99FM...

Upgrade Logback for CVE-2021-42550

h3. Issue Summary In the wake of Log4Shell, CVE-2021-42550 has been created for similar JNDI considerations in Logback. The Logback maintainers have removed some functionality from Logback in response and released Logback 1.2.9. Please note: There is no RCE in Logback, and there is no vulnerabili...

Upgrade Logback for CVE-2021-42550

h3. Issue Summary In the wake of Log4Shell, CVE-2021-42550 has been created for similar JNDI considerations in Logback. The Logback maintainers have removed some functionality from Logback in response and released Logback 1.2.9. Please note: There is no RCE in Logback, and there is no vulnerabili...

CVE-2021-42550

A flaw was found in the logback package. When using a specially-crafted configuration, this issue could allow a remote authenticated attacker to execute arbitrary code loaded from LDAP servers...

OPENSUSE-SU-2021:4109-1 Security update for logback

This update for logback fixes the following issues: Upgrade to version 1.2.8 + In response to log4Shell/CVE-2021-44228, all JNDI lookup code in logback has been disabled until further notice. This impacts ContextJNDISelector and insertFromJNDI element in configuration files. + Also in response to...

Security update for logback (important)

openSUSE Security Update: Security update for logback Announcement ID: openSUSE-SU-2021:4109-1 Rating: important References: 1193795 Cross-References: CVE-2021-44228 CVSS scores: CVE-2021-44228 NVD : 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVE-2021-44228 SUSE: 9.8...

Deserialization of Untrusted Data

In logback version 1.2.9 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers...

CVE-2021-42550

In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers...

DEBIAN-CVE-2021-42550

In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers...

CVE-2021-42550

In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers...

UBUNTU-CVE-2021-42550

In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers...