[CASSANDRA-16464] Upgrade to logback package 1.2.0 or later fix high vulnerabilities

• Type: Improvement
• Status: Resolved
• Priority: Normal
• Resolution: Won't Fix
• Fix Version/s: 3.0.25
• Component/s: Dependencies
• Change Category: Operability
• Complexity: Low Hanging Fruit
• Platform: All
• Assignee: Brandon Williams
• Reporter: Bhargav Joshi

Authors

Brandon Williams

• Created: 19/Feb/21 21:18
• Updated: 13/Mar/24 17:10
• Resolved: 01/Mar/21 15:06

Description

Tag | Distro | CVE ID | Severity | Packages | Source Package | Fix Package Version
– | – | – | – | – | – | –
v0.1.22 | Ubuntu-bionic | CVE-2017-5929 | critical | ch.qos.logback_logback-core | 1.1.3 | fixed in 1.2.0

Issue Links

• duplicates: CASSANDRA-14183 CVE-2017-5929 Security vulnerability and redefine default log rotation policy