[Git][security-tracker-team/security-tracker][master] Add CVE-2026-19880/logback

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5446fd26 by Salvatore Bonaccorso at 2026-08-17T08:31:14+02:00
Add CVE-2026-19880/logback

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5027,7 +5027,8 @@ CVE-2026-1621 (Authentication bypass by primary weakness vulnerability in Univer
 CVE-2026-19884 (In Eclipse Theia versions up to and including 1.69.0, opening a folder ...)
 	NOT-FOR-US: Eclipse
 CVE-2026-19880 (Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (l ...)
-	TODO: check
+	- logback <unfixed>
+	NOTE: https://logback.qos.ch/news.html#1.6.3
 CVE-2026-19879 (A flaw was found in Undertow, an HTTP server, within its HTTP response ...)
 	- undertow <unfixed>
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2516038



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5446fd26a5a7bdfba836fcb5d8337896a9c3a1e3

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5446fd26a5a7bdfba836fcb5d8337896a9c3a1e3
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260817/bc44a8b8/attachment.htm>