[NMS-13361] CVE-2017-5929: bump logback-classic version to latest - The OpenNMS Issue Tracker

XML

Word

Printable

Details

Type: Task
Status: Resolved (View Workflow)
Priority: Minor
Resolution: Fixed
Affects Version/s: Meridian-2018.1.29, Meridian-2019.1.20, Meridian-2020.1.9, Meridian-2021.1.1
Fix Version/s: Meridian-2018.1.30, Meridian-2019.1.21, Meridian-2020.1.10, Meridian-2021.1.2, 28.0.1
Component/s: None
Security Level: Default (Default Security Scheme)
Labels:
None

Description

Our logback version is very old, and while this particular vulnerability probably doesn't affect us, it's worth updating it regardless.

QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.

Attachments

Activity

People

Assignee:: Benjamin Reed

Reporter:: Benjamin Reed

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 08/Jun/21 3:03 PM

Updated:: 13/Jul/21 2:39 PM

Resolved:: 08/Jun/21 5:49 PM