Information on source package apache-log4j2

Available versions

Bug	bullseye	bookworm	trixie	forky	sid	Description
CVE-2026-34481	vulnerable	vulnerable	vulnerable	vulnerable	vulnerable	Apache Log4j's JsonTemplateLayout https://logging.apache.org/log4j/2. ...
CVE-2026-34480	vulnerable	vulnerable	vulnerable	vulnerable	vulnerable	Apache Log4j Core's XmlLayout https://logging.apache.org/log4j/2.x/ma ...
CVE-2026-34479	vulnerable	vulnerable	vulnerable	vulnerable	vulnerable	The Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to ...
CVE-2025-68161	fixed	vulnerable (no DSA)	vulnerable (no DSA)	vulnerable	vulnerable	The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2. ...

Bug	Description
CVE-2026-34478	Apache Log4j Core's Rfc5424Layout https://logging.apache.org/log4j/2. ...
CVE-2026-34477	The fix for CVE-2025-68161 https://logging.apache.org/security.html#C ...
CVE-2021-45105	Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and ...
CVE-2021-45046	It was found that the fix to address CVE-2021-44228 in Apache Log4j 2. ...
CVE-2021-44832	Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fi ...
CVE-2021-44228	Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2. ...
CVE-2020-9488	Improper validation of certificate with host mismatch in Apache Log4j ...
CVE-2017-5645	In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or ...