DLA-4444-1

NameDLA-4444-1
Descriptionapache-log4j2 - security update
SourceDebian LTS
ReferencesCVE-2025-68161

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
apache-log4j2 (PTS)bullseye2.17.1-1~deb11u1vulnerable
bullseye (security)2.17.1-1~deb11u2fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
apache-log4j2sourcebullseye2.17.1-1~deb11u2

Search for package or bug name: Reporting problems