Critical DLA-888-1 1 CVE

logback - security update

Published Apr 7, 2017 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 7	logback	1:1.0.4-1+deb7u1

Vulnerabilities 1

Critical 9.8

CVE-2017-5929

QOS.ch Logback vulnerable to Deserialization of Untrusted Data

QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.

logback logback ch.qos.logback:logback-core ch.qos.logback:logback-classic Debian Ubuntu Maven

Mar 13, 2017