Information on source package log4net

Available versions

ReleaseVersion
trixie1.2.10+dfsg-9
forky1.2.10+dfsg-10
sid1.2.10+dfsg-10

Open issues

BugtrixieforkysidDescription
CVE-2026-105243vulnerable (no DSA)vulnerablevulnerableInsufficient Logging vulnerability in the EventLogAppender of Apache l ...
CVE-2026-105241vulnerable (no DSA)vulnerablevulnerableImproper Handling of Unicode Encoding vulnerability in the SmtpPickupD ...
CVE-2026-105240vulnerable (no DSA)vulnerablevulnerableImproper Neutralization of Null Byte or NUL Character vulnerability in ...
CVE-2026-105239vulnerable (no DSA)vulnerablevulnerableImproper Neutralization of Null Byte or NUL Character vulnerability in ...
CVE-2026-40021vulnerable (no DSA)fixedfixedApache Log4net's XmlLayout https://logging.apache.org/log4net/manual/ ...

Resolved issues

BugDescription
CVE-2026-105244Improper Encoding or Escaping of Output vulnerability in the RemoteSys ...
CVE-2026-105242Improper Handling of Exceptional Conditions vulnerability in the aspne ...
CVE-2018-1285Apache log4net versions before 2.0.10 do not disable XML external enti ...

Security announcements

DSA / DLADescription
DLA-2211-1log4net - security update

Search for package or bug name: Reporting problems