Processed: reassign and merge with #857343

Tue Mar 28 15:51:08 UTC 2017

Processing commands for control at bugs.debian.org:

> reassign 858914 liblogback-java
Bug #858914 [logback] CVE-2017-5929: serialization vulnerability in SocketServer and ServerSocketReceiver
Bug reassigned from package 'logback' to 'liblogback-java'.
Ignoring request to alter found versions of bug #858914 to the same values previously set
Ignoring request to alter fixed versions of bug #858914 to the same values previously set
> forcemerge 857343 858914
Bug #857343 [liblogback-java] logback: CVE-2017-5929: serialization vulnerability affecting the SocketServer and ServerSocketReceiver components
Bug #858914 [liblogback-java] CVE-2017-5929: serialization vulnerability in SocketServer and ServerSocketReceiver
Severity set to 'serious' from 'grave'
Marked as found in versions logback/1:1.1.2-1.
Added tag(s) patch and upstream.
Merged 857343 858914
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
857343: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=857343
858914: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858914
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems