| Release | Version |
|---|---|
| bookworm | 1.0.0-1+deb12u1 |
| trixie | 1.4.0-1+deb13u1 |
| forky | 1.5.0-1 |
| sid | 1.5.0-1 |
| Bug | bookworm | trixie | forky | sid | Description |
|---|---|---|---|---|---|
| CVE-2026-40023 | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable | vulnerable | Apache Log4cxx's XMLLayout https://logging.apache.org/log4cxx/1.7.0/c ... |
| Bug | bookworm | trixie | forky | sid | Description |
|---|---|---|---|---|---|
| CVE-2023-31038 | vulnerable | fixed | fixed | fixed | SQL injection in Log4cxx when using the ODBC appender to send log mess ... |
| Bug | Description |
|---|---|
| CVE-2025-54813 | Improper Output Neutralization for Logs vulnerability in Apache Log4cx ... |
| CVE-2025-54812 | Improper Output Neutralization for Logs vulnerability in Apache Log4cx ... |
| DSA / DLA | Description |
|---|---|
| DLA-4322-1 | log4cxx - security update |