[ubuntu/focal-security] apache-log4j1.2 1.2.17-9ubuntu0.2 (Accepted)

[Paulo Flabiano Smorigo]

apache-log4j1.2 (1.2.17-9ubuntu0.2) focal-security; urgency=medium

  * SECURITY UPDATE: Improper Neutralization
    - debian/patches/CVE-2022-23302.patch: Replace lookup code.
    - debian/patches/CVE-2022-23305.patch: Add flushBufferSecure and
      JdbcPatternParser.
    - debian/patches/CVE-2022-23307.patch: Add
      HardenedLoggingEventInputStream, HardenedObjectInputStream, and
      SocketAppenderTest.java
    - CVE-2022-23302
    - CVE-2022-23305
    - CVE-2022-23307

Date: 2023-03-20 14:47:09.297799+00:00
Changed-By: Paulo Flabiano Smorigo <pfsmorigo at canonical.com>
https://launchpad.net/ubuntu/+source/apache-log4j1.2/1.2.17-9ubuntu0.2
-------------- next part --------------
Sorry, changesfile not available.