Information on source package logback

Available versions

ReleaseVersion
bookworm1:1.2.11-3
trixie1:1.2.11-6
forky1:1.2.11-6
sid1:1.2.11-6

Open issues

BugbookwormtrixieforkysidDescription
CVE-2026-19880vulnerablevulnerable (no DSA)vulnerablevulnerablePath-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (l ...
CVE-2026-13006vulnerablevulnerable (no DSA)vulnerablevulnerableACE vulnerability in conditional configuration file processing by QOS ...
CVE-2026-10532vulnerable (no DSA)vulnerable (no DSA)vulnerablevulnerableDeserialization of untrusted data vulnerability in QOS.CH Sarl logback ...
CVE-2026-9828vulnerable (no DSA)vulnerable (no DSA)vulnerablevulnerableDeserialization of untrusted data vulnerability in QOS.CH Sarl logback ...
CVE-2025-11226vulnerablevulnerable (no DSA)vulnerablevulnerableACE vulnerability in conditional configuration file processing by QOS ...
CVE-2024-12801vulnerable (no DSA)vulnerable (no DSA)vulnerablevulnerableServer-Side Request Forgery (SSRF) in SaxEventRecorder by QOS.CH logba ...
CVE-2024-12798vulnerable (no DSA)vulnerable (no DSA)vulnerablevulnerableACE vulnerability in JaninoEventEvaluator by QOS.CH logback-core ...
CVE-2023-6378vulnerable (no DSA)fixedfixedfixedA serialization vulnerability in logback receiver component part of l ...

Open unimportant issues

BugbookwormtrixieforkysidDescription
CVE-2026-1225vulnerablevulnerablevulnerablevulnerableACE vulnerability in configuration file processing by QOS.CH logback- ...

Resolved issues

BugDescription
CVE-2023-6481A serialization vulnerability in logback receiver component part of l ...
CVE-2021-42550In logback version 1.2.7 and prior versions, an attacker with the requ ...
CVE-2017-5929QOS.ch Logback before 1.2.0 has a serialization vulnerability affectin ...

Security announcements

DSA / DLADescription
DLA-888-1logback - security update

Search for package or bug name: Reporting problems