logback-1.5.36-1.1 on GA media
Multiple security issues were addressed in the logback-1.5.36-1.1 package included in the GA media of openSUSE Tumbleweed. These vulnerabilities affect the logback components on the specified SUSE platform and architecture. A patch is available to remediate these issues. The severity of these vulnerabilities is assessed as medium.
AI Analysis
Technical Summary
The logback-1.5.36-1.1 package on openSUSE Tumbleweed GA media contains multiple security vulnerabilities that have been fixed in this package version. The affected components include logback, logback-access, and logback-examples for the aarch64 architecture. The vendor has released a patched package to address these security issues.
Potential Impact
The vulnerabilities present in the affected logback package versions could potentially allow attackers to exploit security weaknesses in the logging framework on the affected SUSE platform. The exact impact details are not specified, but the overall severity is medium, indicating moderate risk to confidentiality, integrity, or availability.
Mitigation Recommendations
A patch is available for the logback-1.5.36-1.1 package on openSUSE Tumbleweed. Users should update to this fixed package version to remediate the security issues. No additional mitigation steps are indicated by the vendor advisory.
logback-1.5.36-1.1 on GA media
Description
Multiple security issues were addressed in the logback-1.5.36-1.1 package included in the GA media of openSUSE Tumbleweed. These vulnerabilities affect the logback components on the specified SUSE platform and architecture. A patch is available to remediate these issues. The severity of these vulnerabilities is assessed as medium.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The logback-1.5.36-1.1 package on openSUSE Tumbleweed GA media contains multiple security vulnerabilities that have been fixed in this package version. The affected components include logback, logback-access, and logback-examples for the aarch64 architecture. The vendor has released a patched package to address these security issues.
Potential Impact
The vulnerabilities present in the affected logback package versions could potentially allow attackers to exploit security weaknesses in the logging framework on the affected SUSE platform. The exact impact details are not specified, but the overall severity is medium, indicating moderate risk to confidentiality, integrity, or availability.
Mitigation Recommendations
A patch is available for the logback-1.5.36-1.1 package on openSUSE Tumbleweed. Users should update to this fixed package version to remediate the security issues. No additional mitigation steps are indicated by the vendor advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- CLEANSTART-2026-SJ37356
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Alpine"]
- State
- PUBLISHED
Threat ID: 6a7f4411bf8831d5395fd43d
Added to database: 08/14/2026, 16:36:33 UTC
Last enriched: 09/17/2026, 03:37:46 UTC
Last updated: 09/29/2026, 18:11:16 UTC
Views: 28
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.