Bug#857343: liblogback-java: logback < 1.2.0 has a vulnerability in SocketServer and ServerSocketReceiver

Fabrice Dagorn fabrice at dagorn.fr
Fri Mar 10 09:26:16 UTC 2017


CVE-2015-6420 is for Apache Commons, but this is the same issue.

Le 10/03/2017 à 10:15, Emmanuel Bourg a écrit :
> Hi Fabrice,
>
> Thank you for the report. Do you know if there is a CVE ID assigned to
> this vulnerability?
>
> Emmanuel Bourg
>



More information about the pkg-java-maintainers mailing list