Package: apache-log4j1.2 / 1.2.17-7+deb9u1

Metadata

Package Version Patches format
apache-log4j1.2 1.2.17-7+deb9u1 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
build_fix.patch | (download)

build.xml | 7 2 + 5 - 0 !
1 file changed, 2 insertions(+), 5 deletions(-)

 enables the compilation of the jmx classes and tweaks the javadoc.
remove activation framework dependency.patch | (download)

build.xml | 1 0 + 1 - 0 !
tests/build.xml | 2 0 + 2 - 0 !
2 files changed, 3 deletions(-)

 remove the dependency on the activation framework (integrated to java 6 and later)
add missing classes.patch | (download)

build.xml | 4 3 + 1 - 0 !
1 file changed, 3 insertions(+), 1 deletion(-)

 add missing classes to jar
CVE 2019 17571.patch | (download)

src/main/java/org/apache/log4j/FilteredObjectInputStream.java | 65 65 + 0 - 0 !
src/main/java/org/apache/log4j/net/SocketNode.java | 17 15 + 2 - 0 !
2 files changed, 80 insertions(+), 2 deletions(-)

 cve-2019-17571

Bug-Debian: https://bugs.debian.org/947124