[From nobody Thu Oct 15 23:43:10 2026 Received: (at submit) by bugs.debian.org; 20 Dec 2025 20:55:51 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-8.6 required=4.0 tests=BAYES_00,FROMDEVELOPER, FVGT_m_MULTI_ODD,KHOP_HELO_FCRDNS,RDNS_DYNAMIC,SPF_HELO_NONE,SPF_NONE, XMAILER_REPORTBUG autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 37; hammy, 150; neutral, 95; spammy, 0. spammytokens: hammytokens:0.000-+--H*F:U*carnil, 0.000-+--XDebbugsCc, 0.000-+--X-Debbugs-Cc, 0.000-+--HTo:N*Debian, 0.000-+--H*Ad:N*Bug Return-path: <carnil@debian.org> Received: from c-82-192-244-13.customer.ggaweb.ch ([82.192.244.13]:35204 helo=eldamar.lan) by buxtehude.debian.org with esmtp (Exim 4.96) (envelope-from <carnil@debian.org>) id 1vX3LC-0084O0-0r for submit@bugs.debian.org; Sat, 20 Dec 2025 20:14:14 +0000 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Salvatore Bonaccorso <carnil@debian.org> To: Debian Bug Tracking System <submit@bugs.debian.org> Subject: apache-log4j2: CVE-2025-68161 Message-ID: <176626165299.968195.17909517727568336801.reportbug@eldamar.lan> X-Mailer: reportbug 13.2.0 Date: Sat, 20 Dec 2025 21:14:12 +0100 Delivered-To: submit@bugs.debian.org U291cmNlOiBhcGFjaGUtbG9nNGoyClZlcnNpb246IDIuMTkuMC0yClNldmVyaXR5OiBpbXBvcnRh bnQKVGFnczogc2VjdXJpdHkgdXBzdHJlYW0KRm9yd2FyZGVkOiBodHRwczovL2dpdGh1Yi5jb20v YXBhY2hlL2xvZ2dpbmctbG9nNGoyL3B1bGwvNDAwMgpYLURlYmJ1Z3MtQ2M6IGNhcm5pbEBkZWJp YW4ub3JnLCBEZWJpYW4gU2VjdXJpdHkgVGVhbSA8dGVhbUBzZWN1cml0eS5kZWJpYW4ub3JnPgoK SGksCgpUaGUgZm9sbG93aW5nIHZ1bG5lcmFiaWxpdHkgd2FzIHB1Ymxpc2hlZCBmb3IgYXBhY2hl LWxvZzRqMi4KCkNWRS0yMDI1LTY4MTYxWzBdOgp8IFRoZSBTb2NrZXQgQXBwZW5kZXIgaW4gQXBh Y2hlIExvZzRqIENvcmUgdmVyc2lvbnMgMi4wLWJldGE5IHRocm91Z2gKfCAyLjI1LjIgZG9lcyBu b3QgcGVyZm9ybSBUTFMgaG9zdG5hbWUgdmVyaWZpY2F0aW9uIG9mIHRoZSBwZWVyCnwgY2VydGlm aWNhdGUsIGV2ZW4gd2hlbiB0aGUgIHZlcmlmeUhvc3ROYW1lIGh0dHBzOi8vbG9nZ2luZy5hcGFj aGUub3IKfCBnL2xvZzRqLzIueC9tYW51YWwvYXBwZW5kZXJzL25ldHdvcmsuaHRtbCNTc2xDb25m aWd1cmF0aW9uLWF0dHItCnwgdmVyaWZ5SG9zdE5hbWUgIGNvbmZpZ3VyYXRpb24gYXR0cmlidXRl IG9yIHRoZQp8IGxvZzRqMi5zc2xWZXJpZnlIb3N0TmFtZSBodHRwczovL2xvZ2dpbmcuYXBhY2hl Lm9yZy9sb2c0ai8yLngvbWFudWFsCnwgL3N5c3RlbXByb3BlcnRpZXMuaHRtbCNsb2c0ajIuc3Ns VmVyaWZ5SG9zdE5hbWUgIHN5c3RlbSBwcm9wZXJ0eSBpcwp8IHNldCB0byB0cnVlLiAgVGhpcyBp c3N1ZSBtYXkgYWxsb3cgYSBtYW4taW4tdGhlLW1pZGRsZSBhdHRhY2tlciB0bwp8IGludGVyY2Vw dCBvciByZWRpcmVjdCBsb2cgdHJhZmZpYyB1bmRlciB0aGUgZm9sbG93aW5nIGNvbmRpdGlvbnM6 CnwgKiAgVGhlIGF0dGFja2VyIGlzIGFibGUgdG8gaW50ZXJjZXB0IG9yIHJlZGlyZWN0IG5ldHdv cmsgdHJhZmZpYwp8IGJldHdlZW4gdGhlIGNsaWVudCBhbmQgdGhlIGxvZyByZWNlaXZlci4gICAq ICBUaGUgYXR0YWNrZXIgY2FuCnwgcHJlc2VudCBhIHNlcnZlciBjZXJ0aWZpY2F0ZSBpc3N1ZWQg YnkgYSBjZXJ0aWZpY2F0aW9uIGF1dGhvcml0eQp8IHRydXN0ZWQgYnkgdGhlIFNvY2tldCBBcHBl bmRlcuKAmXMgY29uZmlndXJlZCB0cnVzdCBzdG9yZSAob3IgYnkgdGhlCnwgZGVmYXVsdCBKYXZh IHRydXN0IHN0b3JlIGlmIG5vIGN1c3RvbSB0cnVzdCBzdG9yZSBpcyBjb25maWd1cmVkKS4KfCBV c2VycyBhcmUgYWR2aXNlZCB0byB1cGdyYWRlIHRvIEFwYWNoZSBMb2c0aiBDb3JlIHZlcnNpb24g Mi4yNS4zLAp8IHdoaWNoIGFkZHJlc3NlcyB0aGlzIGlzc3VlLiAgQXMgYW4gYWx0ZXJuYXRpdmUg bWl0aWdhdGlvbiwgdGhlCnwgU29ja2V0IEFwcGVuZGVyIG1heSBiZSBjb25maWd1cmVkIHRvIHVz ZSBhIHByaXZhdGUgb3IgcmVzdHJpY3RlZAp8IHRydXN0IHJvb3QgdG8gbGltaXQgdGhlIHNldCBv ZiB0cnVzdGVkIGNlcnRpZmljYXRlcy4KCgpJZiB5b3UgZml4IHRoZSB2dWxuZXJhYmlsaXR5IHBs ZWFzZSBhbHNvIG1ha2Ugc3VyZSB0byBpbmNsdWRlIHRoZQpDVkUgKENvbW1vbiBWdWxuZXJhYmls aXRpZXMgJiBFeHBvc3VyZXMpIGlkIGluIHlvdXIgY2hhbmdlbG9nIGVudHJ5LgoKRm9yIGZ1cnRo ZXIgaW5mb3JtYXRpb24gc2VlOgoKWzBdIGh0dHBzOi8vc2VjdXJpdHktdHJhY2tlci5kZWJpYW4u b3JnL3RyYWNrZXIvQ1ZFLTIwMjUtNjgxNjEKICAgIGh0dHBzOi8vd3d3LmN2ZS5vcmcvQ1ZFUmVj b3JkP2lkPUNWRS0yMDI1LTY4MTYxClsxXSBodHRwczovL2dpdGh1Yi5jb20vYXBhY2hlL2xvZ2dp bmctbG9nNGoyL3B1bGwvNDAwMgpbMl0gaHR0cHM6Ly9saXN0cy5hcGFjaGUub3JnL3RocmVhZC94 cjMza3l4cTNzbDY3bHdiNjFnZ3ZtMWZ6YzhrN2R2eAoKUGxlYXNlIGFkanVzdCB0aGUgYWZmZWN0 ZWQgdmVyc2lvbnMgaW4gdGhlIEJUUyBhcyBuZWVkZWQuCgpSZWdhcmRzLApTYWx2YXRvcmUK ]